https://research.aurainfosec.io/disclosure/sagecrm2/