CVE-2021-41596: Salesagility Suitecrm

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.

Affected products

• Salesagility Suitecrm: before 7.10.33 (fixed in 7.10.33); from 7.11.0, before 7.11.22 (fixed in 7.11.22)

Published 2021-10-04. Last modified 2026-06-17.