CVE-2023-46736

EspoCRM is an Open Source CRM (Customer Relationship Management) software. In affected versions there is Server-Side Request Forgery (SSRF) vulnerability via the upload image from url api. Users who have access to `the /Attachment/fromImageUrl` endpoint can specify URL to point to an internal host. Even though there is check for content type, it can be bypassed by redirects in some cases. This SSRF can be leveraged to disclose internal information (in some cases), target internal hosts and bypass firewalls. This vulnerability has been addressed in commit `c536cee63` which is included in release version 8.0.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-918

• https://github.com/espocrm/espocrm/commit/c536cee6375e2088f961af13db7aaa652c983072Patch
• https://github.com/espocrm/espocrm/security/advisories/GHSA-g955-rwxx-jvf6Vendor Advisory
• https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/Third Party Advisory
• https://github.com/espocrm/espocrm/commit/c536cee6375e2088f961af13db7aaa652c983072Patch
• https://github.com/espocrm/espocrm/security/advisories/GHSA-g955-rwxx-jvf6Vendor Advisory
• https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/Third Party Advisory

Published

Dec 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46730Group-Office is an enterprise CRM and groupware tool. In aff…8.8
• CVE-2023-46731XWiki Platform is a generic wiki platform offering runtime s…9.8
• CVE-2023-46732XWiki Platform is a generic wiki platform offering runtime s…6.1
• CVE-2023-46733Symfony is a PHP framework for web and console applications …6.5
• CVE-2023-46734Symfony is a PHP framework for web and console applications …6.1
• CVE-2023-46735Symfony is a PHP framework for web and console applications …6.1
• CVE-2023-46737Cosign is a sigstore signing tool for OCI containers. Cosign…5.3
• CVE-2023-46738CubeFS is an open-source cloud-native file storage system. A…6.5
• CVE-2023-46739CubeFS is an open-source cloud-native file storage system. A…5.9
• CVE-2023-4674Improper Neutralization of Special Elements used in an SQL C…
• CVE-2023-46740CubeFS is an open-source cloud-native file storage system. P…9.8
• CVE-2023-46741CubeFS is an open-source cloud-native file storage system. A…9.8