DiscoveredTopRecent posts
All topics (4086)

EspoCRM versions prior to 9.3.4 contain vulnerabilities that allow authenticated admins to overwrite the `sourceId` field on attachments and inject malicious templates through unnormalized input parameters.

Apr 23, 20262 posts · 0 repliesscore 0.17

The thread discusses two vulnerabilities in EspoCRM, an open-source customer relationship management application, highlighting security risks in its formula scripting engine and admin template management endpoints. These vulnerabilities cou…