SugarCRM (ConnectorsController) Server-Side Request Forgery Vulnerability

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A server-side...

SugarCRM ConnectorsController Server-Side Request Forgery Vulnerability

SugarCRM versions prior to 7.9.4.0 and 7.11.0.0 suffer from a server-side request forgery vulnerability. The vulnerability is located within the "ConnectorsController::actionCallRest" method. User input passed through the "url" request parameter is not properly sanitized before being used in a ca...

SugarCRM ConnectorsController Server-Side Request Forgery

------------------------------------------------------------------------- SugarCRM ConnectorsController Server-Side Request Forgery Vulnerability ------------------------------------------------------------------------- - Software Link: http://www.sugarcrm.com - Affected Versions: All versions...