← Database

CVE-2021-41596

MEDIUM CVSS: 5.3 Published: 2021-10-04 Modified: 2026-06-17

Description

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.

Affected Platforms

Salesagility Suitecrm

Weakness Type

CWE-22

References