Suite 7.14.2 - SSRF
5
Medium
Discovered by
Offensive Team, Fluid Attacks
Summary
Full name
Suite 7.14.2 - SSRF
Code name
State
Public
Release date
Affected product
Suite CRM
Vendor
SuiteCRM
Affected version(s)
7.14.2
Fixed version(s)
7.14.4
Vulnerability name
Server-site request forgery
Vulnerability type
Remotely exploitable
Yes
CVSS v3.1 vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS v3.1 base score
5.0
Exploit available
Yes
CVE ID(s)
Description
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.
Vulnerability
A server request forgery (SSRF) vulnerability has been identified in Suite CRM that, under certain conditions, could allow a user to make arbitrary HTTP requests through the vulnerable server.
The vulnerability exists because a user-entered URL is passed to the getimagesize function.
Evidence of exploitation
Our security policy
We have reserved the ID CVE-2023-6388 to refer to this issue from now on. Disclosure policy
System Information
Suite CRM
Version: 7.14.2
Operating System: MacOS
References
GitHub repository: https://github.com/salesagility/SuiteCRM/
Patch: https://docs.suitecrm.com/admin/releases/7.14.x/#_7_14_4
Mitigation
An updated version of Suite CRM is available at the vendor page.
Credits
The vulnerability was discovered by Carlos Bello from Fluid Attacks' Offensive Team.
Timeline
Vulnerability discovered
Vendor contacted
Vendor replied
Vendor confirmed
Vulnerability patched
Public disclosure
Does your application use this vulnerable software?
During our free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.
