SuiteCRM up to and including 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document.
salesagility suitecrm