CVE-2024-36416 affects SuiteCRM versions prior to 7.14.4 and 8.6.1, stemming from a deprecated v4 API example that lacks log rotation. This vulnerability carries a high severity CVSS score of 7.5, allowing an unauthenticated attacker to cause a denial of service by generating excessive log data. While no active exploits, public exploit code, or significant community discussion have been observed, its high FAUCET Risk Score of 96/100 indicates a notable potential risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 7.14.4CPE matchmatch criteria | cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:* | ||
>= 8.0.0, < 8.6.1CPE matchmatch criteria | cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.