Files
CVEs-PoC/2021/CVE-2021-41595.md
2025-09-29 21:09:30 +02:00

699 B

CVE-2021-41595

Description

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name parameter of the Step3 import functionality.

POC

Reference

No PoCs from references.

Github