Skip to content

Latest commit

 

History

History
16 lines (15 loc) · 541 Bytes

CVE-2021-45903.md

File metadata and controls

16 lines (15 loc) · 541 Bytes
Raw

[CVEID]

CVE-2021-45903

[PRODUCT]

SuiteCRM

[VERSION]

before 7.10.35 and before 7.12.2

[PROBLEM TYPE]

Cross Site Scripting (XSS)

[DESCRIPTION]

A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35 and before 7.12.2, allows a remote attacker to introduce arbitrary JavaScript via attachments upload, a different vulnerability than CVE-2021-39267 and CVE-2021-39268.

Timeline:

  • Reported to vendor 11.09.2021
  • Acknowledged 13.09.2021
  • Validated 13.09.2021
  • Fixed 17.12.2021