CVE-2021-45897: High severity sugarcrm vulnerability
Published Jan 28, 2022
·Updated
SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution.
Affected Software
6 affected components
SalesAgility SuiteCRM<7.12.3
SalesAgility SuiteCRM>=8.0.0<8.0.2
SalesAgility SuiteCRM=8.0-beta
SalesAgility SuiteCRM=8.0-beta2
SalesAgility SuiteCRM=8.0-beta3
SalesAgility SuiteCRM=8.0-rc
Remediation
Patch Available
Event History
Jan 28, 2022
CVE Published
via MITRE·04:21 PM
Data Sourced
via MITRE·04:21 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2021-45897.
2
What is the severity level of CVE-2021-45897?
CVE-2021-45897 has a severity level of 8.8, which is considered high.
3
What does CVE-2021-45897 allow an attacker to do?
CVE-2021-45897 allows an attacker to execute remote code.
4
Which versions of SuiteCRM are affected by CVE-2021-45897?
SuiteCRM versions before 7.12.3 and 8.x before 8.0.2 are affected by CVE-2021-45897.
5
How can I fix the vulnerability CVE-2021-45897?
To fix CVE-2021-45897, it is recommended to update to SuiteCRM version 7.12.3 or version 8.0.2.