PT-2023-30176 · Espocrm · Espocrm

Name of the Vulnerable Software and Affected Versions: EspoCRM versions prior to 8.0.5 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability via the upload image from URL API. Users with access to the /Attachment/fromImageUrl endpoint can specify a URL to point to ...