CVE-2024-45392
SuiteCRM has wrong deletion permission checks on API delete call
Résumé
SuiteCRM has wrong deletion permission checks on API delete call
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Versions 7.14.5 and 8.6.2 contain a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web docs.suitecrm.com