إرسال #555938: ChurchCRM 5.16.0 Server-Side Request Forgery

Vendor was contacted via GitHub advisory on March 12th but has not responded in any way.

The advisory reports an SSRF vulnerability in ChurchCRM v5.16.0.

• المصدر: ⚠️ https://everydaysparkling.com/p/2c56b9ec-5747-40a3-b089-ff796f23ebd4/
• المستخدم: Jelle Janssens (UID 81048)
• ارسال: 10/04/2025 03:47 PM (1 سنة منذ)
• الاعتدال: 26/04/2025 08:47 AM (16 days later)
• الحالة: تمت الموافقة
• إدخال VulDB: 306290 [ChurchCRM 5.16.0 Referer تجاوز الصلاحيات]
• النقاط: 15