Lucene search
K

6 matches found

CNVD
CNVD
added 2021/10/09 12:0 a.m.10 views

SuiteCRM path traversal vulnerability

SuiteCRM, a customer relationship management system from the SuiteCRM Suitecrm team, has a security vulnerability that could allow an attacker to include arbitrary files via the importFile parameter portion of the RefreshMapping import function...

5.3CVSS4.9AI score0.00302EPSS
Exploits0References1
Prion
Prion
added 2021/10/04 5:15 p.m.10 views

Information disclosure

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality...

5CVSS5.3AI score0.00302EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2021/10/04 4:48 p.m.45 views

CVE-2021-41596

Summary of CVE-2021-41596 : SuiteCRM before 7.10.33 and before 7.11.22 is affected by a directory traversal vulnerability in the RefreshMapping import functionality. An attacker can leverage the importFile parameter to partially include arbitrary files, resulting in information disclosure. The is...

5.3CVSS5.2AI score0.00302EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2021/10/04 4:48 p.m.7 views

CVE-2021-41596

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality...

5.5AI score0.00302EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.2 views

SuiteCRM 路径遍历漏洞

SuiteCRM, a customer relationship management system from the SuiteCRM Suitecrm team, has a security vulnerability that could allow an attacker to include arbitrary files via the importFile parameter portion of the RefreshMapping import function...

5.3CVSS5.8AI score0.00302EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2021/10/04 12:0 a.m.2 views

PT-2021-23358 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.10.33 SuiteCRM versions prior to 7.11.22 Description: The issue allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the...

5.3CVSS5.2AI score0.00302EPSS
Exploits0References9
Rows per page
Query Builder