| Package | Affected versions | Patched versions |
|---|---|---|
| suitecrm | < 7.11.17 | 7.11.17 |
SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled .php file under the web root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free