high8.8
CVE-2021-45041
SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_d…
Impact
SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Salesagility | Suitecrm | before 7.12.2 Versions 8.0, 8.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.suitecrm.com/8.x/admin/releases/8.0/
- https://docs.suitecrm.com/admin/releases/7.12.x/
- https://github.com/manuelz120/CVE-2021-45041
- https://docs.suitecrm.com/8.x/admin/releases/8.0/
- https://docs.suitecrm.com/admin/releases/7.12.x/
- https://github.com/manuelz120/CVE-2021-45041