CVE-2024-58258

Description

SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur.

Affected Platforms

Weakness Type

CWE-94

References

• https://support.sugarcrm.com/resources/security/sugarcrm-sa-2024-059/
• http://seclists.org/fulldisclosure/2025/Jul/21