Has this SQL Injection Vulnerability been fixed?

💬 General Discussion
1

[Redacted]

2

Hi averyml,

We take Security seriously here at SuiteCRM so if you have discovered a security risk please report it by emailing security@suitecrm.com. This will be delivered to the product team who handle security issues. Please don’t disclose security bugs publicly until they have been handled by the security team.

Thanks.

3

I understand your concerns and will send an email in the future, but just to be clear, this isn’t a security vulnerability that I discovered. It’s already been published by someone else, and it has been made publicly available.

1 Like
4

@averyml yes we understand that, and (also just to be clear) we are thankful for what you did in taking the care to warn us about it quickly.

Thanks! :slight_smile: