← CVE Intelligence

CVE-2024-36410

SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller PUBLISHED

Description (CNA)

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

Affected (CNA)

Vendor / productVersions
salesagility / SuiteCRMaffected < 7.14.4; affected >= 8.0.0, < 8.6.1

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.