medium4.3
CVE-2024-36419
SuiteCRM is an open-source Customer Relationship Management (CRM) software application.
Impact
SuiteCRM is an open-source Customer Relationship Management (CRM) software application. A vulnerability in versions prior to 8.6.1 allows for Host Header Injection when directly accessing the `/legacy` route. Version 8.6.1 contains a patch for the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Salesagility | Suitecrm | before 8.6.1 |