CVE-2023-46736: Server-Side Request Forgery in espocrm
EspoCRM is an Open Source CRM (Customer Relationship Management) software. In affected versions there is Server-Side Request Forgery (SSRF) vulnerability via the upload image from url api. Users who have access to the /Attachment/fromImageUrl endpoint can specify URL to point to an internal host. Even though there is check for content type, it can be bypassed by redirects in some cases. This SSRF can be leveraged to disclose internal information (in some cases), target internal hosts and bypass firewalls. This vulnerability has been addressed in commit c536cee63 which is included in release version 8.0.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46736?
The severity of CVE-2023-46736 is classified as high due to the potential for unauthorized access to internal resources.
How do I fix CVE-2023-46736?
To fix CVE-2023-46736, update EspoCRM to version 8.0.3 or later where the vulnerability has been addressed.
What is the impact of CVE-2023-46736?
The impact of CVE-2023-46736 includes the risk of server-side request forgery, allowing attackers to perform requests from the server that could lead to sensitive data exposure.
Which versions of EspoCRM are affected by CVE-2023-46736?
EspoCRM versions up to and including 8.0.2 are affected by CVE-2023-46736.
Who is at risk from CVE-2023-46736?
Users and administrators of EspoCRM running affected versions are at risk from CVE-2023-46736 due to potential exploitation by unauthorized users.