← Back to browse · API

CVE-2024-1644

Severity
CRITICAL
CVSS
9.9
EPSS
0.00856
Risk score
39.9
CISA KEV
No
PoC
No
Published
2024-02-19
Modified
2024-08-01
First seen
2026-08-08
Aliases
EUVD-2024-17382, GHSA-52J8-6RX5-297X
Products
Suite CRM:Suite CRM, Suite CRM:Suite CRM 7.14.2
Sources
euvd EUVD-2024-17382

Description

Suite CRM version 7.14.2 allows including local php files. This is possible because the application is vulnerable to LFI.

References