3 matches found
CVE-2021-41595
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the filename parameter of the Step3 import functionality...
5.3CVSS0.01829EPSS
SaveExploits0References4
Information disclosure
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the filename parameter of the Step3 import functionality...
5CVSS5.3AI score0.01829EPSS
SaveExploits0References4Affected Software1
CVE-2021-41595
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the filename parameter of the Step3 import functionality...
5.5AI score0.01829EPSS
SaveExploits0References4
20