espocrm.

EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex

• espocrm
• Denial of service

EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization

• EspoCRM
• Broken access control

EspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachment

• espocrm
• Broken access control

EspoCRM: Mass email template renderer leaks restricted record fields

• espocrm
• Broken access control

EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete

• espocrm
• Path traversal

EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received

• espocrm
• Cross-site scripting (XSS)

EspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in export

• espocrm
• Other injection

EspoCRM: Stored XSS in wysiwyg template fields if CSP is disabled

• espocrm
• Cross-site scripting (XSS)

EspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin user

• espocrm
• Cross-site scripting (XSS)

EspoCRM: Blind SQL injection via streamAttachments where-clause complex expression

• espocrm
• SQL injection

EspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Users

• espocrm
• Broken access control

EspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to record

• espocrm
• Broken access control

EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params

• espocrm
• Insecure deserialization

EspoCRM: Portal User ACL Bypass Exposes Internal Stream Notes

• espocrm
• Broken access control

EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpoint

• espocrm
• Information disclosure

EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass via Address-Book Search

• espocrm
• Information disclosure

EspoCRM before 10.0.7 IDOR via Import attachmentId Parameter

• espocrm
• Broken access control

EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords

• espocrm
• Hard-coded credentials

EspoCRM before 10.0.6 Two-Factor Authentication Bypass on Unauthenticated Routes

• espocrm
• Authentication bypass

EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form

• espocrm
• Cross-site scripting (XSS)

EspoCRM through 10.0.8 Weak Token Generation via rand()

• EspoCRM
• Weak cryptography or TLS

EspoCRM before 10.0.4 Field-level Security Bypass via Attendees

• espocrm
• Broken access control

EspoCRM before 10.0.4 SSRF via IPv6 Transition Address Bypass

• espocrm
• Server-side request forgery (SSRF)

EspoCRM: IDOR in EmailTemplate Prepare Endpoint Leaks Entity Data via Email Address Lookup

• espocrm
• Broken access control

EspoCRM: Broken Access Control / IDOR in Note Pinning API allows unauthorized modification of notes

• espocrm
• Broken access control

EspoCRM: Stored XSS via SVG attachment loading same-origin JavaScript

• espocrm
• Cross-site scripting (XSS)

EspoCRM has Admin TemplateManager path traversal that allows arbitrary file read write and delete

• espocrm
• Path traversal

EspoCRM vulnerable to authenticated RCE via Formula with path traversal in attachment `sourceId`, exploitable by admin user

• espocrm
• Path traversal

EspoCRM: Email importEml can import and delete another user's attachment by raw fileId

• espocrm
• Broken access control

EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network Access

• espocrm
• Race condition
• Server-side request forgery (SSRF)

EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field

• espocrm
• Cross-site scripting (XSS)
• CWE-116

EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation

• espocrm
• Server-side request forgery (SSRF)

EspoCRM 5.7.0 < 5.9.0 - Two-Factor Authentication Bypass via Auth Token Reuse Between Accounts with Identical Passwords

• EspoCRM
• Authentication bypass

EspoCRM allows arbitrary user creation via stored SVG injection and CSRF

• espocrm
• Cross-site request forgery (CSRF)

EspoCRM is vulnerable to access denial through double slash in URI corrupting router cache

• espocrm
• HTTP request smuggling

EspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special Elements

• espocrm
• Other injection

EspoCRM vulnerable to HTML Injection into phishing, which may lead to account takeover

• espocrm
• Other injection

EspoCRM Allows Potential Disclosure of Sensitive Information in the User Sorting Function

• espocrm
• Information disclosure

EspoCRM allows unrestricted Embedding in Iframe dashlet

• espocrm
• CWE-1021

EspoCRM weakness in "Forgot password"

• espocrm
• CWE-610

Server-Side Request Forgery in espocrm

• espocrm
• Server-side request forgery (SSRF)

Unrestricted Upload of File with Dangerous Type in EspoCRM

• EspoCRM
• Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in EspoCRM

• EspoCRM
• Unrestricted file upload

EspoCRM Avatar Persistent XSS

• EspoCRM
• Cross-site scripting (XSS)