8.5
/ 10
HIGH
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:L/S:C/UI:N
Description
A Server-Side Request Forgery (SSRF) in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internal resources via supplying a crafted POST request.
AI Analysis
Server-Side Request Forgery (SSRF) vulnerability in Webkul Krayin CRM
Basic Information
ID
CVE-2026-38527
Source
mitre
Published
Apr 14, 2026 at 00:00
Modified
Apr 14, 2026 at 15:13
Affected Product
Vendor
Webkul
Product
Krayin CRM
Version
2.2.x
Affected Versions
n/a n/a n/a
AI Assessment
AI Score
8.5 / 10
AI Severity
High
Vendor
Webkul
Product
Krayin CRM
Version
2.2.x