SuiteCRM: PHAR deserialization vulnerability to code execution

This advisory details a PHAR deserialization vulnerability that exists in SuiteCRM which could be leveraged by an authenticated administrator to execute commands on the underlying operating system.