SSRF Vulnerability in CordysCRM v1.4.1 /organization/settings/third-party/test Endpoint

github.com 2026-07-19查看中文 →

Security AdvisoryHigh1Panel-dev

Affected:

CordysCRM v1.4.1

Referenced CVEs: CVE-2026-16223 · 6.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Savon RCE via module_eval (CVE-2026-53510) and Patch Advisory 2026-08-01 Savon Code Injection RCE (CVE-2026-53510) via WSDL Operation Names with PoC 2026-08-01 Savon Ruby WSDL Operation Name Code Injection (RCE) via module_eval (CVE-2026-53510) 2026-08-01 redaxo CMS Authenticated RCE via Multi-segment Extension Bypass in mediapool 2026-08-01 REDAXO fix: Block dangerous extensions in any filename segment to prevent RCE 2026-08-01

Offline Archive

Offline screenshot & PDF are Pro-exclusive