CVE-2026-29097
SuiteCRM Server-Side Request Forgery and Denial of Service via RSS Feed Dashlet
Summary
SuiteCRM Server-Side Request Forgery and Denial of Service via RSS Feed Dashlet
Original description
The description as published by the source.
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions prior to 7.15.1 and 8.9.3 contain a Server-Side Request Forgery (SSRF) vulnerability combined with a Denial of Service (DoS) condition in the RSS Feed Dashlet component. Versions 7.15.1 and 8.9.3 patch the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web docs.suitecrm.com