Liushaozhe

**Name of the Vulnerable Software and Affected Versions** CordysCRM versions prior to 1.4.2 **Description** An issue exists in the Third Party Endpoint component within the `TokenService.java` file. A remote attacker can perform a server-side request forgery (SSRF)—a technique that allows an attacker to induce the server-side application to make requests to an unintended location—by manipulating the `mkAddress` argument. **Recommendations** Update CordysCRM to version 1.4.2 or later. As a temporary mitigation, restrict access to the `mkAddress` argument within the Third Party Endpoint component.

**Name of the Vulnerable Software and Affected Versions** 1Panel-dev CordysCRM versions prior to 1.4.2 **Description** An issue exists in the Third Party Edit Endpoint where the `getSqlBotSrc()` function within the `backend/crm/src/main/java/cn/cordys/crm/system/service/IntegrationConfigService.java` file does not properly handle the `appSecret` argument. This allows a remote attacker to perform server-side request forgery (SSRF), a technique where the server is tricked into making unauthorized requests to internal or external resources. **Recommendations** Update 1Panel-dev CordysCRM to version 1.4.2 or later. As a temporary mitigation, restrict access to the Third Party Edit Endpoint or avoid using the `appSecret` argument until the update is applied.