CVE-2024-36419: SuiteCRM-Core Host Header Injection in /legacy
SuiteCRM is an open-source Customer Relationship Management (CRM) software application. A vulnerability in versions prior to 8.6.1 allows for Host Header Injection when directly accessing the /legacy route. Version 8.6.1 contains a patch for the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36419?
CVE-2024-36419 is classified as a medium severity vulnerability due to the potential for Host Header Injection.
How do I fix CVE-2024-36419?
To fix CVE-2024-36419, upgrade to SuiteCRM version 8.6.1 or later, which includes a patch for this vulnerability.
What versions of SuiteCRM are affected by CVE-2024-36419?
CVE-2024-36419 affects all versions of SuiteCRM prior to 8.6.1.
What kind of attack is possible due to CVE-2024-36419?
CVE-2024-36419 allows for Host Header Injection attacks, which can lead to various security issues such as cache poisoning.
Can CVE-2024-36419 be exploited remotely?
Yes, CVE-2024-36419 can be exploited remotely by directly accessing the affected '/legacy' route.