Lucene search
+L

3 matches found

OSV
OSV
added 2026/07/30 7:38 p.m.5 views

CVE-2026-67530 WACRM: SSRF via the automation `send_webhook` action

WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation sendwebhook action in src/lib/automations/engine.ts and its validation in src/lib/automations/validate.ts allowed an authenticated user with automation privileges to submit an arbitrary webhook URL that the...

6.4CVSS5.6AI score
SaveExploits0References4
Rows per page
Query Builder