CVE-2021-41597

SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included i...

Original description

The description as published by the source.

SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included in a ZIP archive.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory docs.suitecrm.com
advisory docs.suitecrm.com
advisory github.com
package github.com
web suitecrm.com