CVE-2021-41869

SuiteCRM 7.10.x prior to 7.10.33 and 7.11.x prior to 7.11.22 are vulnerable to privilege escalation. The corroborating sources list the affected ranges and confirm the fix versions: 7.10.33 and 7.11.22. Root cause details are not provided in the documents, and there is no exploitation status repo...

PT-2021-23357 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.10.33 SuiteCRM versions prior to 7.11.22 Description: The issue allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file name parameter of the Step3...

PT-2021-23358 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.10.33 SuiteCRM versions prior to 7.11.22 Description: The issue allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the...