CVE-2024-36418: SuiteCRM authenticated RCE using connectors
Published Jun 10, 2024
·Updated
SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in connectors allows an authenticated user to perform a remote code execution attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue.
Affected Software
2 affected components
SalesAgility SuiteCRM<7.14.4
SalesAgility SuiteCRM>=8.0.0<8.6.1
Event History
Jun 10, 2024
CVE Published
via MITRE·08:16 PM
Data Sourced
via MITRE·08:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-36418?
CVE-2024-36418 has a high severity due to the potential for remote code execution by an authenticated user.
2
How do I fix CVE-2024-36418?
To fix CVE-2024-36418, upgrade SuiteCRM to versions 7.14.4 or 8.6.1 or later.
3
Who is affected by CVE-2024-36418?
CVE-2024-36418 affects SuiteCRM versions prior to 7.14.4 and 8.6.1.
4
What type of vulnerability is CVE-2024-36418?
CVE-2024-36418 is classified as a remote code execution vulnerability.
5
How can I determine if my installation is vulnerable to CVE-2024-36418?
You can determine if your installation is vulnerable by checking if you are running SuiteCRM version prior to 7.14.4 or 8.6.1.