← All advisories

Critical severity9.9NVD Advisory· Published Feb 20, 2024· Updated Jun 17, 2026

CVE-2024-1644

CVE-2024-1644

Description

Suite CRM version 7.14.2 allows including local php files. This is possible

because the application is vulnerable to LFI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Salesagility/Suitecrm2 versions
cpe:2.3:a:salesagility:suitecrm:7.14.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:salesagility:suitecrm:7.14.2:*:*:*:*:*:*:*
- (no CPE)range: <=7.14.2
Suitecrm/Suitecrmllm-fuzzy
Range: <=7.14.2
osv-coords
pkg:bitnami/suitecrm
Range: >= 7.14.2, < 7.14.3
Zsuite/Suite CRMv5
Range: 7.14.2

Patches

Vulnerability mechanics

References

1

fluidattacks.com/advisories/silva/nvdExploitVendor Advisory

News mentions

0

No linked articles in our index yet.