Description SuiteCRM through 7.11.11 allows PHAR Deserialization. References https://suitecrm.com http://seclists.org/fulldisclosure/2020/Feb/4 http://packetstormsecurity.com/files/156324/SuiteCRM-7.11.11-Phar-Deserialization.html