CVE-2021-45899: Critical severity sugarcrm vulnerability
Published Jan 28, 2022
·Updated
SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution.
Affected Software
6 affected components
SalesAgility SuiteCRM<7.12.3
SalesAgility SuiteCRM>=8.0.0<8.0.2
SalesAgility SuiteCRM=8.0-beta
SalesAgility SuiteCRM=8.0-beta2
SalesAgility SuiteCRM=8.0-beta3
SalesAgility SuiteCRM=8.0-rc
Event History
Jan 28, 2022
CVE Published
via MITRE·04:25 PM
Data Sourced
via MITRE·04:25 PM
Description
Frequently Asked Questions
1
What is CVE-2021-45899?
CVE-2021-45899 is a vulnerability in SuiteCRM before 7.12.3 and 8.x before 8.0.2 that allows PHAR deserialization, leading to remote code execution.
2
How severe is CVE-2021-45899?
CVE-2021-45899 has a severity rating of 9.8 (Critical).
3
How does CVE-2021-45899 work?
CVE-2021-45899 exploits the PHAR deserialization vulnerability in SuiteCRM, allowing an attacker to execute remote code on the affected system.
4
Is SuiteCRM 7.12.3 affected by CVE-2021-45899?
Yes, SuiteCRM version 7.12.3 is affected by CVE-2021-45899.
5
How can I fix CVE-2021-45899?
To fix CVE-2021-45899, it is recommended to update to SuiteCRM version 7.12.3 or 8.0.2, as appropriate.