CVE-2023-6388: Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.

PriorityP428medium5CVSS 3.1

AVNACLPRLUINSCCNILAN

EPSS

0.46%

36.5th percentile

Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
salesagility	suitecrm	—	—
suite_crm	suite_crm	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.