critical9.8
CVE-2021-45899
SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution.
Impact
SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Salesagility | Suitecrm | before 7.12.3 from 8.0.0 before 8.0.2 Version 8.0 |