CVE-2021-45041

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id an...

Original description

The description as published by the source.

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch docs.suitecrm.com
patch docs.suitecrm.com
report github.com