Description
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, SuiteCRM contains an unauthenticated open redirect vulnerability in the WebToLead capture functionality. A user-supplied POST parameter is used as a redirect destination without validation, allowing attackers to redirect victims to arbitrary external websites. This vulnerability allows attackers to abuse the trusted SuiteCRM domain for phishing and social engineering attacks by redirecting users to malicious external websites. Versions 7.15.1 and 8.9.3 patch the issue.
INFO
Published Date :
2026-03-19T22:58:48.879Z
Last Modified :
2026-03-20T18:09:24.064Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2026-29105 vulnerability.
| Vendors | Products |
|---|---|
| Suitecrm |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-29105.
