SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion.
{ "cpes": [ "cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*" ], "severity": "Critical" }