CVE-2021-45041

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id an...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch docs.suitecrm.com
patch docs.suitecrm.com
report github.com