Executive brief
CordysCRM is an open source AI-powered customer relationship management system. A user with approval process configuration permissions can inject internal URLs that the server will request when approval actions are executed, enabling attackers to access cloud metadata, scan internal networks, and interact with internal services that would otherwise be unreachable.
Technical details
Server-Side Request Forgery (SSRF) vulnerability in ApprovalResourceService.sendWebHook lacks input validation on webhook URLs read from stored approval configuration, unlike the optional testConnect path which includes SSRF protections. An authenticated attacker with PROCESS_SETTING_ADD permission can exploit this via POST /approval-flow/add to configure malicious URLs and POST /approval-action/approve to trigger requests to internal targets.
Affected products
- 1Panel CordysCRM 1.7.3
Timeline
- 2026-09-18: disclosed
- 2026-07-09: patched: Version 1.7.4 includes SSRF validation fix