← Database

CVE-2021-45041

HIGH CVSS: 8.8 Published: 2021-12-19 Modified: 2026-06-17

Description

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date.

Affected Platforms

Salesagility Suitecrm

Weakness Type

CWE-89

References