CVE-2021-45898: Critical severity sugarcrm vulnerability
Published Jan 28, 2022
·Updated
SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion.
Affected Software
6 affected components
SalesAgility SuiteCRM<7.12.3
SalesAgility SuiteCRM>=8.0.0<8.0.2
SalesAgility SuiteCRM=8.0-beta
SalesAgility SuiteCRM=8.0-beta2
SalesAgility SuiteCRM=8.0-beta3
SalesAgility SuiteCRM=8.0-rc
Event History
Jan 28, 2022
CVE Published
via MITRE·04:23 PM
Data Sourced
via MITRE·04:23 PM
Description
Frequently Asked Questions
1
What is CVE-2021-45898?
CVE-2021-45898 is a vulnerability in SuiteCRM before 7.12.3 and 8.x before 8.0.2 that allows local file inclusion.
2
How severe is CVE-2021-45898?
CVE-2021-45898 has a severity rating of 9.8 (critical).
3
Which software versions are affected by CVE-2021-45898?
CVE-2021-45898 affects SuiteCRM versions before 7.12.3 and 8.x before 8.0.2.
4
How can I fix CVE-2021-45898?
To fix CVE-2021-45898, upgrade SuiteCRM to version 7.12.3 or 8.0.2 depending on your installation.
5
Where can I find more information about CVE-2021-45898?
You can find more information about CVE-2021-45898 in the SuiteCRM documentation: SuiteCRM 8.x: [https://docs.suitecrm.com/8.x/admin/releases/8.0/](https://docs.suitecrm.com/8.x/admin/releases/8.0/) SuiteCRM 7.12.x: [https://docs.suitecrm.com/admin/releases/7.12.x/](https://docs.suitecrm.com/admin/releases/7.12.x/)