CVE-2021-45899

CRITICAL CVSS: 9.8 Published: 2022-01-28 Modified: 2026-06-17

Description

SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution.

Affected Platforms

Salesagility Suitecrm

Weakness Type

CWE-502

References