CVE-2024-50332: Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50332?
CVE-2024-50332 is classified as a high-severity vulnerability due to the potential for exploitation through Blind SQL injection.
How do I fix CVE-2024-50332?
To remediate CVE-2024-50332, users should upgrade to SuiteCRM versions 7.14.6 or 8.7.1 or later.
What versions of SuiteCRM are affected by CVE-2024-50332?
CVE-2024-50332 affects SuiteCRM versions prior to 7.14.6 and between 8.0.0 and 8.7.1.
What is the impact of CVE-2024-50332?
The impact of CVE-2024-50332 is the possibility of unauthorized database access through SQL injection, leading to potential data breaches.
Is there a patch available for CVE-2024-50332?
Yes, a patch is available in the form of updated SuiteCRM versions 7.14.6 and 8.7.1.