CVE-2024-58258

high · 7.2

SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur.

7.2

CVSS

16.3%

EPSS (exploit prob.)

97th

EPSS percentile

2025-07-13

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Weaknesses

CWE-94

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-58258