Salesagility: >> Suitecrm >> 7.14.2 Security Vulnerabilities
Suite CRM version 7.14.2 allows including local php files. This is possible
because the application is vulnerable to LFI.
CVSS Score
9.9
EPSS Score
0.002
Published
2024-02-20
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through
the vulnerable server. This is possible because the application is vulnerable
to SSRF.
CVSS Score
5.0
EPSS Score
0.001
Published
2024-02-07
Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1.
CVSS Score
8.1
EPSS Score
0.001
Published
2023-07-11
Page 3