CVE-2021-41597

—

CVSS 3.1

8.8 high

EPSS

1%p62

Published

Jan 12, 2022 (Jan 12, 2022)

Modified

Jun 17, 2026

Description

SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included in a ZIP archive.

Vendors: salesagility
Products: suitecrm
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.