Lucene search
HistoryFeb 07, 2024 - 3:15 a.m.
CVE-2023-6388
suite crm
ssrf
vulnerability
http requests
cve-2023-6388
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
5.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.1%
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through
the vulnerable server. This is possible because the application is vulnerable
to SSRF.
Affected configurations
Node
salesagilitysuitecrmMatch7.14.2
Related
cvelist
cvelist
CVE-2023-6388 Suite CRM v7.14.2 - SSRF
2024-02-07 02:47:59
prion
prion
Server side request forgery (ssrf)
2024-02-07 03:15:00
cve
cve
CVE-2023-6388
2024-02-07 03:15:49
osv
osv
BIT-suitecrm-2023-6388
2024-03-06 11:05:33
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
5.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.1%
Related for NVD:CVE-2023-6388