CVE-2020-25466

CRMEB 3.0 has an SSRF vulnerability in the downloadimage interface that can remotely download arbitrary files on the server and remotely execute arbitrary code. The connected documents explicitly identify this as a server-side request forgery in the CRMEB 3.0 downloadimage endpoint, enabling arbi...