Description (CNA)
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://suitecrm.com
- https://github.com/salesagility/SuiteCRM
- https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_33
- https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_22
- https://github.com/ach-ing/cves/blob/main/CVE-2021-41596.md
ADP enrichment
No English description supplied.