CVE-2024-50332

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-89

• https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-53xh-mjmq-j35pThird Party Advisory

Published

Nov 5, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50327SQL injection in Ivanti Endpoint Manager before 2024 Novembe…7.2
• CVE-2024-50328SQL injection in Ivanti Endpoint Manager before 2024 Novembe…7.2
• CVE-2024-50329Path traversal in Ivanti Endpoint Manager before 2024 Novemb…8.8
• CVE-2024-5033The SULly WordPress plugin before 4.3.1 does not have CSRF c…5.9
• CVE-2024-50330SQL injection in Ivanti Endpoint Manager before 2024 Novembe…9.8
• CVE-2024-50331An out-of-bounds read vulnerability in Ivanti Avalanche befo…7.5
• CVE-2024-50333SuiteCRM is an open-source, enterprise-ready Customer Relati…8.8
• CVE-2024-50334Scoold is a Q&A and a knowledge sharing platform for teams. …5.3
• CVE-2024-50335SuiteCRM is an open-source, enterprise-ready Customer Relati…5.4
• CVE-2024-50336matrix-js-sdk is a Matrix messaging protocol Client-Server S…5.3
• CVE-2024-50337Chamilo is a learning management system. Prior to version 1.…5.3
• CVE-2024-50338Git Credential Manager (GCM) is a secure Git credential help…7.4