CVE-2024-45392

published 2024-09-05

CVE-2024-45392: SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat…

Priority P4 21 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I L A N

SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Versions 7.14.5 and 8.6.2 contain a patch for the issue.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
salesagility	suitecrm	< 7.14.5	7.14.5
salesagility	suitecrm	—	—
salesagility	suitecrm	>= 8.0.0 < 8.6.2	8.6.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284