| Package | Affected versions | Patched versions |
|---|---|---|
| suitecrm | ≥ 7.10.0, < 7.10.35≥ 7.12, < 7.12.2 | 7.10.357.12.2 |
SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included in a ZIP archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free