Description
Suite CRM version 7.14.2 allows including local php files. This is possible
because the application is vulnerable to LFI.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Suite CRM | Suite CRM | 7.14.2 | — |
Critical · 9.9
CVE-2024-1644
EUVD-2024-17382GHSA-52j8-6rx5-297x
Suite CRM v7.14.2 - RCE via Local File Inclusion
Published Feb 19, 2024 · Updated Aug 1, 2024 · Assigned by Fluid Attacks