BIT-suitecrm-2023-6388

vendorUSosv

Suite CRM v7.14.2 - SSRF

view advisory published 2024-03-06Licence: per source

Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-6388US	—	0.46% (39th)	—	2024-02-07
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.

references

External citations — patches, advisories, analysis.

https://fluidattacks.com/advisories/leon/WEB
https://github.com/salesagility/SuiteCRM/WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-6388WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan