CVE-2019-17311 - Sugarcrm Sugarcrm

Critical 8.8

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.

Affected software

Sugarcrm Sugarcrm

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.