SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document.
{ "cpes": [ "cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*" ], "severity": "Medium" }