Submeter #555938: ChurchCRM 5.16.0 Server-Side Request Forgery

Vendor was contacted via GitHub advisory on March 12th but has not responded in any way.

The advisory reports an SSRF vulnerability in ChurchCRM v5.16.0.

• Fonte: ⚠️ https://everydaysparkling.com/p/2c56b9ec-5747-40a3-b089-ff796f23ebd4/
• Utilizador: Jelle Janssens (UID 81048)
• Submissão: 10/04/2025 15h47 (há 1 Ano)
• Moderação: 26/04/2025 08h47 (16 days later)
• Estado: Aceite
• Entrada VulDB: 306290 [ChurchCRM 5.16.0 Referer Elevação de Privilégios]
• Pontos: 15