CVE-2021-41595

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal

published October 4, 2021

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name parameter of the Step3 import functionality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01829 · 78.7th percentile
Published
2021-10-04T16:46Z
EPSS history
Timeline
  • 04 OCT 16:46Z
    SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal
    cvelistv5