Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2024-36406
Analyzed
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-10 Jun, 2024 | 15:15
Updated At-12 Aug, 2025 | 20:20

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, unchecked input allows for open re-direct. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.15.4MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
CPE Matches
SalesAgility Ltd.
salesagility
>>suitecrm>>Versions before 7.14.4(exclusive)
cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*
SalesAgility Ltd.
salesagility
>>suitecrm>>Versions from 8.0.0(inclusive) to 8.6.1(exclusive)
cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-601Secondarysecurity-advisories@github.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-hcw8-p37h-8hrvsecurity-advisories@github.com
Vendor Advisory
https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-hcw8-p37h-8hrvaf854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Change History
0Changes found
Details not found