CVE-2024-36406: SuiteCRM vulnerable to open redirects
Published Jun 10, 2024
·Updated
SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, unchecked input allows for open re-direct. Versions 7.14.4 and 8.6.1 contain a fix for this issue.
Affected Software
3 affected components
SuiteCRM SuiteCRM<7.14.4, <8.6.1
SalesAgility SuiteCRM<7.14.4
SalesAgility SuiteCRM>=8.0.0<8.6.1
Event History
Jun 10, 2024
CVE Published
via MITRE·03:06 PM
Data Sourced
via MITRE·03:06 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-36406?
CVE-2024-36406 is classified as a critical vulnerability due to the potential for open redirects.
2
How do I fix CVE-2024-36406?
The fix for CVE-2024-36406 is to upgrade SuiteCRM to versions 7.14.4 or 8.6.1 or later.
3
What are the affected versions for CVE-2024-36406?
CVE-2024-36406 affects SuiteCRM versions prior to 7.14.4 and 8.6.1.
4
What type of vulnerability is CVE-2024-36406?
CVE-2024-36406 is an open redirect vulnerability due to unchecked user input.
5
Who is affected by CVE-2024-36406?
Users of SuiteCRM versions prior to 7.14.4 and 8.6.1 are affected by CVE-2024-36406.