CVE-2021-41596

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal

published October 4, 2021

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01829 · 78.7th percentile
Published
2021-10-04T16:48Z
EPSS history
Timeline
  • 04 OCT 16:48Z
    SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal
    cvelistv5