Lucene search
+L

4 matches found

osv_bit
osv_bit
•added 2024/11/07 7:19 a.m.•36 views

BIT-SUITECRM-2024-49774 ModuleScanner flaws in SuiteCRM

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. SuiteCRM relies on the blacklist of functions/methods to prevent installation of malicious MLPs. But this checks can be bypassed with some syntax constructions. SuiteCRM uses tokengetall to par...

7.2CVSS5.5AI score0.00502EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/11/05 6:37 p.m.•23 views

CVE-2024-49774 ModuleScanner flaws in SuiteCRM

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. SuiteCRM relies on the blacklist of functions/methods to prevent installation of malicious MLPs. But this checks can be bypassed with some syntax constructions. SuiteCRM uses tokengetall to par...

7.2CVSS6.9AI score
SaveExploits0References3
Mend
Mend
•added 2024/11/05 6:37 p.m.•11 views

CVE-2024-49774

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. SuiteCRM relies on the blacklist of functions/methods to prevent installation of malicious MLPs. But this checks can be bypassed with some syntax constructions. SuiteCRM uses tokengetall to par...

8.6CVSS5.5AI score0.00502EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•9 views

CVE-2024-49774: Improper Input Validation

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. SuiteCRM relies on the blacklist of functions/methods to prevent installation of malicious MLPs. But this checks can be bypassed with some syntax constructions. SuiteCRM uses tokengetall to par...

7.2CVSS5.6AI score0.00502EPSS
SaveExploits0References1
Rows per page
Query Builder