https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-21T03:16:08.937740+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-113643 CVE-2026-113643 — EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization 2026-10-21T03:16:08.941991+00:00

Affected: EspoCRM

A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rendering Pipeline. Performing a manipulation of the argument ID results in authorization bypass. The attack may be initiated remotely. The patch is named 91a9edbcedb9c7aa8e3d3ac81d8a7acccb99bca2. It is suggested to install a patch to address this issue.