Lucene search
HistoryJun 10, 2024 - 3:15 p.m.
CVE-2024-36406
suitecrm
open redirect
vulnerability
fix
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
0.001 Low
EPSS
Percentile
26.0%
SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, unchecked input allows for open re-direct. Versions 7.14.4 and 8.6.1 contain a fix for this issue.
Related
cvelist
cvelist
CVE-2024-36406 SuiteCRM vulnerable to open redirects
2024-06-10 15:06:22
vulnrichment
vulnrichment
CVE-2024-36406 SuiteCRM vulnerable to open redirects
2024-06-10 15:06:22
osv
osv
BIT-suitecrm-2024-36406
2024-06-12 07:39:28
cve
cve
CVE-2024-36406
2024-06-10 15:15:52
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
0.001 Low
EPSS
Percentile
26.0%
Related for NVD:CVE-2024-36406