SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"introduced": "7.10.0"
},
{
"fixed": "7.10.20"
},
{
"introduced": "7.10.0"
},
{
"fixed": "7.10.20"
},
{
"introduced": "7.11.0"
},
{
"fixed": "7.11.8"
},
{
"introduced": "7.11.0"
},
{
"fixed": "7.11.8"
}
],
"source": "CPE_RANGE",
"vendor_product": "salesagility:suitecrm",
"cpes": [
"cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*"
]
}
]
}