CVE-2024-36413 | THREATINT

Description

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in the import module error view allows for a cross-site scripting attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

Reserved 2024-05-27 | Published 2024-06-10 | Updated 2024-08-02 | Assigner GitHub_M

HIGH: 8.9CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Problem types

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

< 7.14.4

affected

>= 8.0.0, < 8.6.1

affected

References

github.com/...iteCRM/security/advisories/GHSA-ph2c-hvvf-r273

cve.org (CVE-2024-36413)

nvd.nist.gov (CVE-2024-36413)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.