Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

SuiteCRM/SuiteCRM-Core

              hotfix @ ad74f84
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

SQL Injection: 2 prior fixes. Scrutinize any change in this area.

core/backend/Data/LegacyHandler/SecurityFiltersTrait.php: most-fixed (1 issue). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Authorization Bypass: 1 historical fix(es) link modules/Users/authentication/LDAPAuthenticate/LDAPAuthenticateUser.php to Authorization Bypass.

Open Redirect: 1 historical fix(es) link modules/Campaigns/WebToLeadCapture.php to Open Redirect.

SQL Injection: 1 historical fix(es) link modules/Administration/UpgradeWizard.php to SQL Injection.