BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the sendemail Celery task, which compiles the user-supplied AccountEmail messagebody with django.template.Template(). Authenticated organization members can submit template tags through POST /api/accounts/<id>/createmail/ to disclose the rendering context and loaded Python modules, or block the shared Celery worker with nested loops.

BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers via unbounded routing rule regex patterns. Attackers can create a routing rule with a catastrophically backtracking pattern evaluated by matchcondition() during case saves, exhausting workers shared across all tenants.

BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in readupload() that reads entire CSV uploads before enforcing the 5 MB limit. Authenticated users with mass-import permission can send oversized CSV files concurrently to /api/contacts/import/ and /api/cases/import/ endpoints to exhaust worker memory and trigger out-of-memory termination.

BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in renderinvoicetemplate() that allows authenticated organization members to inject markup into custom-template invoice PDFs. Attackers can place HTML and CSS in notes, terms, client name or address fields to overlay totals, payee and payment instructions in PDFs served via download, public links and emails.