Submit #555938: ChurchCRM 5.16.0 Server-Side Request Forgery

Vendor was contacted via GitHub advisory on March 12th but has not responded in any way.

The advisory reports an SSRF vulnerability in ChurchCRM v5.16.0.

• Source: ⚠️ https://everydaysparkling.com/p/2c56b9ec-5747-40a3-b089-ff796f23ebd4/
• User: Jelle Janssens (UID 81048)
• Submission: 04/10/2025 15:47 (1 Year ago)
• Moderation: 04/26/2025 08:47 (16 days later)
• Status: Accepted
• VulDB entry: 306290 [ChurchCRM 5.16.0 Referer server-side request forgery]
• Points: 15