Skip to content
OpenAdvisories
Critical · 9.6 CVE-2024-36409 EUVD-2024-36066

SuiteCRM authenticated SQL Injection in TreeData entrypoint

Published Jun 10, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in Tree data entry point. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

Affected products

VendorProductAffectedFixed
salesagility SuiteCRM < 7.14.4, >= 8.0.0, < 8.6.1 —

References