CVE-2023-46736 - CVE House

Back to Database

Status published Medium CVE-2023-46736

Server-Side Request Forgery in espocrm

5.3 CVSS

Vulnerability Description

EspoCRM is an Open Source CRM (Customer Relationship Management) software. In affected versions there is Server-Side Request Forgery (SSRF) vulnerability via the upload image from url api. Users who have access to `the /Attachment/fromImageUrl` endpoint can specify URL to point to an internal host. Even though there is check for content type, it can be bypassed by redirects in some cases. This SSRF can be leveraged to disclose internal information (in some cases), target internal hosts and bypass firewalls. This vulnerability has been addressed in commit `c536cee63` which is included in release version 8.0.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-46736

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from espocrm

View All →

EspoCRM allows arbitrary user creation via stored SVG injection and CSRF

EspoCRM is vulnerable to access denial through double slash in URI corrupting router cache

EspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special Elements

EspoCRM Allows Potential Disclosure of Sensitive Information in the User Sorting Function

EspoCRM vulnerable to HTML Injection into phishing, which may lead to account takeover

Affected Vendor

espocrm

View all reports →

Affected Software

espocrm

Vulnerable Versions:

< 8.0.5

Timeline

Official Publish: December 5th, 2023

Last Modified: August 2nd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1213 Data from Information Repositories

T1005 Data from Local System

T1046 Network Service Discovery