crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33117.txt | Third Party Advisory |
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33117.txt | Third Party Advisory |
Configurations
History
11 Jun 2025, 12:04
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:crmeb:crmeb_java:1.3.4:*:*:*:*:*:*:* | |
First Time |
Crmeb
Crmeb crmeb Java |
|
References | () https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33117.txt - Third Party Advisory |
06 May 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-06 20:15
Updated : 2025-06-11 12:04
NVD link : CVE-2024-33117
Mitre link : CVE-2024-33117
JSON object : View
Products Affected
crmeb
- crmeb_java
CWE
No CWE.