CVE-2026-112288 — Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding
Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Atta…
Published: 2026-10-19 · CVSS: 2.1 · CVSS 4.0
Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint() validation and an internal address when Guzzle re-resolves, sending blind requests to internal services and cloud metadata endpoints.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7