CVE-2021-41596: Path Traversal
Published Oct 4, 2021
·Updated
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.
Affected Software
2 affected components
SalesAgility SuiteCRM<7.10.33
SalesAgility SuiteCRM>=7.11.0<7.11.22
Event History
Oct 4, 2021
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-41596?
CVE-2021-41596 is a vulnerability in SuiteCRM that allows information disclosure via Directory Traversal.
2
How does CVE-2021-41596 affect SuiteCRM?
CVE-2021-41596 affects SuiteCRM versions before 7.10.33 and 7.11.22.
3
What is the severity level of CVE-2021-41596?
The severity level of CVE-2021-41596 is medium, with a CVSS score of 5.3.
4
How can an attacker exploit CVE-2021-41596?
An attacker can exploit CVE-2021-41596 by partially including arbitrary files via the importFile parameter of the RefreshMapping import functionality.
5
How can CVE-2021-41596 be fixed?
To fix CVE-2021-41596, it is recommended to update SuiteCRM to version 7.10.33 or 7.11.22.