| Package | Affected versions | Patched versions |
|---|---|---|
| suitecrm | = 8.0= 8.0.0< 7.12.2 | 7.12.2 |
SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free