CVE-2021-41597

SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included i...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included in a ZIP archive.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory docs.suitecrm.com
advisory docs.suitecrm.com
advisory github.com
package github.com
web suitecrm.com