CVE-2023-6388CWE-918

Suite CRM v7.14.2 - SSRF

Medium · published February 7, 2024

CVSS v3.1
5.0
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

Suite CRM version 7.14.2 allows making arbitrary HTTP requests through

the vulnerable server. This is possible because the application is vulnerable

to SSRF.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-02-07T02:47Z
EPSS history
Timeline
  • 07 FEB 02:47Z
    Suite CRM v7.14.2 - SSRF
    cvelistv5