CVE-2021-45041: SQL Injection
Published Dec 19, 2021
·Updated
SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resourceid and startdate.
Affected Software
6 affected components
SalesAgility SuiteCRM<7.12.2
SalesAgility SuiteCRM=8.0-beta
SalesAgility SuiteCRM=8.0-beta2
SalesAgility SuiteCRM=8.0-beta3
SalesAgility SuiteCRM=8.0-rc
SalesAgility SuiteCRM=8.0.0
Remediation
Patch Available
Patch Available
Event History
Dec 19, 2021
CVE Published
via MITRE·08:34 AM
Data Sourced
via MITRE·08:34 AM
Description
Data Sourced
via NVD·09:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-45041?
CVE-2021-45041 is a vulnerability that allows authenticated SQL injection in SuiteCRM versions before 7.12.2 and 8.x before 8.0.1 via the Tooltips action in the Project module.
2
How severe is CVE-2021-45041?
CVE-2021-45041 has a severity rating of 8.8 (high).
3
Which software versions are affected by CVE-2021-45041?
SuiteCRM versions before 7.12.2 and 8.x before 8.0.1 are affected by CVE-2021-45041.
4
How can I mitigate the vulnerability in SuiteCRM?
To mitigate the vulnerability in SuiteCRM, it is recommended to update to version 7.12.2 or 8.0.1.
5
Where can I find more information about CVE-2021-45041?
More information about CVE-2021-45041 can be found in the SuiteCRM documentation and the CVE report on GitHub.