提交 #555938: ChurchCRM 5.16.0 Server-Side Request Forgery

Vendor was contacted via GitHub advisory on March 12th but has not responded in any way.

The advisory reports an SSRF vulnerability in ChurchCRM v5.16.0.

• 来源: ⚠️ https://everydaysparkling.com/p/2c56b9ec-5747-40a3-b089-ff796f23ebd4/
• 用户: Jelle Janssens (UID 81048)
• 提交: 2025-04-10 15時47分 (1 年前)
• 管理: 2025-04-26 08時47分 (16 days later)
• 状态: 已接受
• VulDB条目: 306290 [ChurchCRM 5.16.0 Referer 权限提升]
• 积分: 15