CVE-2024-1644: Suite CRM v7.14.2 - RCE via Local File Inclusion
Published Feb 19, 2024
·Updated
Suite CRM version 7.14.2 allows including local php files. This is possible
because the application is vulnerable to LFI.
Affected Software
1 affected component
SalesAgility SuiteCRM=7.14.2
Event History
Feb 19, 2024
CVE Published
via MITRE·11:54 PM
Data Sourced
via MITRE·11:54 PM
DescriptionSeverityWeakness
Feb 20, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-1644?
CVE-2024-1644 is considered a critical vulnerability due to its potential to allow local file inclusion in Suite CRM.
2
How do I fix CVE-2024-1644?
To fix CVE-2024-1644, upgrade to a version of Suite CRM that has patched this local file inclusion vulnerability.
3
What software versions are affected by CVE-2024-1644?
CVE-2024-1644 affects Suite CRM version 7.14.2.
4
What types of attacks can exploit CVE-2024-1644?
CVE-2024-1644 can be exploited to conduct local file inclusion attacks, potentially leading to unauthorized access to sensitive files.
5
Is CVE-2024-1644 specific to any platform?
Yes, CVE-2024-1644 is specifically related to Suite CRM and its local file inclusion vulnerabilities.