SugarCRM ConnectorsController Server-Side Request Forgery Vulnerability

SugarCRM versions prior to 7.9.4.0 and 7.11.0.0 suffer from a server-side request forgery vulnerability. The vulnerability is located within the "ConnectorsController::actionCallRest" method. User input passed through the "url" request parameter is not properly sanitized before being used in a ca...

SugarCRM ConnectorsController Server-Side Request Forgery

------------------------------------------------------------------------- SugarCRM ConnectorsController Server-Side Request Forgery Vulnerability ------------------------------------------------------------------------- - Software Link: http://www.sugarcrm.com - Affected Versions: All versions...