CVE-2021-45041

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and…

published December 19, 2021

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02236 · 82.7th percentile
Published
2021-12-19T08:34Z
EPSS history
Timeline
  • 19 DEC 08:34Z
    SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and…
    cvelistv5