CVE-2024-11123

🗓️ 12 Nov 2024 13:00:13Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 42 Views🌐 WEB

Vulnerability in Lingdang CRM 8.6.4.3 allows remote path traversal attac

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-11123	12 Nov 202413:03	–	circl
CNNVD	Lingdang CRM 路径遍历漏洞	12 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-11123 上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal	12 Nov 202413:00	–	cvelist
EUVD	EUVD-2024-33667	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11123	12 Nov 202413:15	–	nvd
OSV	CVE-2024-11123	12 Nov 202413:15	–	osv
RedhatCVE	CVE-2024-11123	23 May 202506:28	–	redhatcve
Vulnrichment	CVE-2024-11123 上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal	12 Nov 202413:00	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

51mis lingdang_crmRange≤8.6.4.3

[
  {
    "vendor": "上海灵当信息科技有限公司",
    "product": "Lingdang CRM",
    "versions": [
      {
        "version": "8.6.4.0",
        "status": "affected"
      },
      {
        "version": "8.6.4.1",
        "status": "affected"
      },
      {
        "version": "8.6.4.2",
        "status": "affected"
      },
      {
        "version": "8.6.4.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
wiki	www.wiki.shikangsi.com/post/share/39d736ad-73d1-49cd-a97f-59f396a58626
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
url	query param	/crm/data/pdf.php	Path traversal via manipulated url parameter to pdf.php leading to potential arbitrary file read.	CWE-22

17 Jun 2026 06:57Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.3 - 7.5

CVSS 24

CVSS 45.3

CVSS 34.3

EPSS0.01023

SSVC

CWE-22