VULNERABILITY INTELLIGENCE

CVE-2024-36409

CVSS score9.6 CRITICAL
EPSS probability0.43%
CISA KEVNot currently listed
Published2024-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Description

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in Tree data entry point. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

Weakness classification

  • security-advisories@github.com: CWE-89
  • nvd@nist.gov: CWE-89

Primary references