Description
SuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled during a Download Import File Template operation.
Unscored
CVE-2020-15301
EUVD-2020-7298GHSA-8hfg-c2jc-x92h
SuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fi…
Published Nov 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre