CVE-2024-49773 | SalesAgility SuiteCRM up to 7.14.5/8.7.0 Export generateSearchWhere current_post sql injection (GHSA-5hr4-r43c-6qf7)

CVE-2024-49773 | SalesAgility SuiteCRM up to 7.14.5/8.7.0 Export generateSearchWhere current_post sql injection (GHSA-5hr4-r43c-6qf7)

A vulnerability, which was classified as critical, was found in SalesAgility SuiteCRM up to 7.14.5/8.7.0. Affected is the function generateSearchWhere of the component Export. The manipulation of the argument current_post leads to sql injection. This vulnerability is traded as CVE-2024-49773. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.