High severity8.6NVD Advisory· Published Jun 10, 2024· Updated Jun 17, 2026

CVE-2024-36416

Description

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a deprecated v4 API example with no log rotation allows denial of service by logging excessive data. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Salesagility/Suitecrm2 versions
cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*range: <7.14.4
- (no CPE)range: < 7.14.4
Suitecrm/Suitecrmllm-fuzzy
Range: <7.14.4, <8.6.1
osv-coords
pkg:bitnami/suitecrm
Range: < 7.14.4

Patches

Vulnerability mechanics

References

github.com/salesagility/SuiteCRM/security/advisories/GHSA-jrpp-22g3-2j77nvdVendor Advisory
docs.suitecrm.com/admin/releases/7.14.x/nvd

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000