Invia #555938: ChurchCRM 5.16.0 Server-Side Request Forgery

Vendor was contacted via GitHub advisory on March 12th but has not responded in any way.

The advisory reports an SSRF vulnerability in ChurchCRM v5.16.0.

• Fonte: ⚠️ https://everydaysparkling.com/p/2c56b9ec-5747-40a3-b089-ff796f23ebd4/
• Utente: Jelle Janssens (UID 81048)
• Sottomissione: 10/04/2025 15:47 (1 Anno fa)
• Moderazione: 26/04/2025 08:47 (16 days later)
• Stato: Accettato
• Voce VulDB: 306290 [ChurchCRM 5.16.0 Referer escalationi di privilegi]
• Punti: 15