CVE-2021-41595

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the filename parameter of the Step3 import functionality...

CVE-2021-41595

CVE-2021-41595 affects SuiteCRM before 7.10.33 and 7.11.22. The issue allows information disclosure via Directory Traversal: an attacker can partially include arbitrary files through the file_name parameter of the Step3 import functionality. Impact is information disclosure as described in multip...