CVE-2020-25466

2020-10-2314:23:16

mitre

www.cve.org

ssrf crmeb 3.0 remote code execution

AI Score

9.7

Confidence

High

EPSS

0.017

Percentile

87.8%

JSON

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code.

References

crmeb.com

github.com/crmeb/CRMEB

github.com/crmeb/CRMEB/issues/22