CVE-2024-36416
SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a deprecated v4 API example with no log rotation allows denial of service by logging excessive data. Versions 7.14.4 and 8.6.1 contain a fix for this issue.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.6
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- EPSS probability
- 1.95%
- CWE
- CWE-779
- Published
- 2024-06-10
- Last modified
- 2026-03-13
Affected products
- salesagility SuiteCRM
- salesagility SuiteCRM
Weakness type
Related vulnerabilities
- CVE-2026-86200 — PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT
- CVE-2026-20210 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- CVE-2026-20209 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- CVE-2026-28718 — Denial of service due to insufficient input validation in authentication logging. The following...
- CVE-2025-69230 — AIOHTTP Vulnerable to Cookie Parser Warning Storm
- CVE-2025-8696 — DoS attack against the Stork UI from an unauthenticated user
- CVE-2025-53636 — Open OnDemand Shell App closed websocket DoS
- CVE-2024-55628 — Suricata oversized resource names utilizing DNS name compression can lead to resource starvation