Lucene search
CVE-2024-36416
SuiteCRM v4 API denial of service issue fixed in 7.14.4 and 8.6.
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2024-36416 SuiteCRM v4 API Excessive log data DOS | 10 Jun 202420:03 | – | vulnrichment |
 | CVE-2024-36416 SuiteCRM v4 API Excessive log data DOS | 10 Jun 202420:03 | – | cvelist |
 | BIT-SUITECRM-2024-36416 | 12 Jun 202407:37 | – | osv |
| CVE-2024-36416 | 10 Jun 202420:15 | – | osv |
 | Exploit for Logging of Excessive Data in Salesagility Suitecrm | 9 Jun 202407:18 | – | githubexploit |
 | CVE-2024-36416 | 10 Jun 202420:15 | – | nvd |
Node
[
{
"vendor": "salesagility",
"product": "SuiteCRM",
"versions": [
{
"version": "< 7.14.4",
"status": "affected"
},
{
"version": ">= 8.0.0, < 8.6.1",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| <target> | query param | /<crm-root> | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
| <tld> | query param | /<crm-root> | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
| crm-root | query param | /<crm-root> | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
| <target> | query param | /suite7/docroot/ | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
| <tld> | query param | /suite7/docroot/ | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
| crm-root | query param | /suite7/docroot/ | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
| <target> | query param | /SuiteCRM-7.14.3/ | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
| <tld> | query param | /SuiteCRM-7.14.3/ | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
| crm-root | query param | /SuiteCRM-7.14.3/ | Vulnerability in SuiteCRM prior to 7.14.4 and 8.6.1 allows denial of service through excessive log data due to a deprecated API. | CWE-779 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo10 Jun 2024 20:15Current
7.9High risk
Vulners AI Score7.9
CVSS37.5 - 8.6
EPSS0.55065
SSVC