Server side request forgery (ssrf)

2024-02-0703:15:00

PRIOn knowledge base

www.prio-n.com

suite crm

ssrf

server-side requestforgery

http requests

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.1%

Suite CRM version 7.14.2 allows making arbitrary HTTP requests through

the vulnerable server. This is possible because the application is vulnerable

to SSRF.

CPENameOperatorVersion
suitecrmeq7.14.2

CPE	Name	Operator	Version
	suitecrm	eq	7.14.2

References

fluidattacks.com/advisories/leon/

github.com/salesagility/SuiteCRM/