SuiteCRM 访问控制错误漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. An access control error vulnerability exists in SuiteCRM versions 7.14.6 and 8.8.0 that stems from a legacy iCal service authentication flaw that could lead to unauthorized access to meeting data...

CVE-2025-54786

SuiteCRM is affected by a broken authentication issue in the legacy iCal service that allows unauthenticated access to meeting data in versions 7.14.6 and 8.8.0. An unauthenticated actor can view any user’s meeting (calendar event) data, and related functionality enables user enumeration. The vul...