← CVE Intelligence

CVE-2024-36409

SuiteCRM authenticated SQL Injection in TreeData entrypoint PUBLISHED

Description (CNA)

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in Tree data entry point. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

Affected (CNA)

Vendor / productVersions
salesagility / SuiteCRMaffected < 7.14.4; affected >= 8.0.0, < 8.6.1

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.