← Database

CVE-2021-41595

MEDIUM CVSS: 5.3 Published: 2021-10-04 Modified: 2026-06-17

Description

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name parameter of the Step3 import functionality.

Affected Platforms

Salesagility Suitecrm

Weakness Type

CWE-22

References