Security CVE Pending

SuiteCRM Forum - English Language SuiteCRM General Discussion
1

Sorry if this has been asked elsewhere already…

On the release notes page https://docs.suitecrm.com/admin/releases/7.12.x/#_7_12_6, it states the following: -

  • CVE: Pending - SQL Injection Vulnerability
  • CVE: Pending - SQL Injection Vulnerability
  • CVE: Pending - SQL Injection Vulnerability
  • CVE: Pending - Improper Access Control
  • CVE: Pending - RCE and CSRF Vulnerability
  • CVE: Pending - Authenticated Bypass Vulnerability

Does “CVE: Pending” mean the vulnerability has been fixed and is awaiting a CVE number, or does it mean the Vulnerability is still pending a fix?

Thanks for your help.

2

It means it’s already fixed in that release.
Then there is a time to allow people to upgrade safely before the details go public, it’s standard procedure.

3

Thanks for confirming. :grinning:

1 Like