| Package | Affected versions | Patched versions |
|---|---|---|
| suitecrm | ≥ 7.11.0, < 7.11.22< 7.10.33 | 7.11.227.10.33 |
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name parameter of the Step3 import functionality.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free