Description (CNA)
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Suite CRM / Suite CRM | affected 7.14.2 |
CWE
CWE-918
References
- https://fluidattacks.com/advisories/leon/
- https://github.com/salesagility/SuiteCRM/
- https://docs.suitecrm.com/admin/releases/7.14.x/#_7_14_4
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.