Blind SQL Injection Vulnerability Affects SuiteCRM, Update Recommended

CVE-2024-50332

Summary

A vulnerability in SuiteCRM, the open-source CRM software from SalesAgility, has been identified, characterized by insufficient input value validation leading to a Blind SQL injection in the DeleteRelationShip function. This flaw allows malicious actors to potentially exploit the system without adequate defenses in place. The vulnerability has been addressed in the recent updates, specifically in versions 7.14.6 and 8.7.1, making it crucial for users to upgrade to these versions to mitigate the risk. At this time, no workarounds have been identified, emphasizing the importance of timely updates to maintain the security of installed SuiteCRM instances.

References