SuiteCRM 8.10.1 Authenticated Server-Side Request Forgery

SuiteCRM versions through 7.15.1 and 8.10.1 contain an authenticated server-side request forgery vulnerability in CalendarAccount testConnection. The proof of concept submits a supplied CalDAV server URL to demonstrate server-side request handling...