Patch Ticker

SuiteCRM multiple flaws allow data theft and privilege escalation

Logged-in users of this company customer tool can steal data or take over the server!

Summary

Several flaws in the SuiteCRM customer relationship software let a logged-in user steal data or gain more rights, and some let a user run code on the server. Versions before 7.15.2 and from 8.0.0 before 8.10.2 are affected.

Affected when

  • A CRM login account is needed

What to do

Update to 7.15.2 or 8.10.2 or later.

Update to at least the version for your product:

  • SuiteCRM 7 7.15.2 or later
  • SuiteCRM 8 8.10.2 or later

Products and platforms

  • SuiteCRM

CVE IDs

Sources

Times

First published

First seen