CVE-2024-36414: SuiteCRM authenticated Server-Side Request Forgery
SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in the connectors file verification allows for a server-side request forgery attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36414?
CVE-2024-36414 is classified as a medium severity vulnerability due to its potential for server-side request forgery.
How do I fix CVE-2024-36414?
To fix CVE-2024-36414, upgrade SuiteCRM to versions 7.14.4 or 8.6.1 or later.
What type of attack does CVE-2024-36414 allow?
CVE-2024-36414 allows for a server-side request forgery attack, which can lead to unauthorized actions on behalf of the server.
Which versions of SuiteCRM are affected by CVE-2024-36414?
CVE-2024-36414 affects SuiteCRM versions prior to 7.14.4 and between 8.0.0 and 8.6.1.
Who is the vendor for the affected software in CVE-2024-36414?
The vendor for the affected software in CVE-2024-36414 is SalesAgility.