4 matches found
CVE-2024-33117
crmebjava v1.3.4 was discovered to contain a Server-Side Request Forgery SSRF via the mergeList method in class com.zbkj.front.pub.ImageMergeController...
5.3CVSS7.4AI score0.00468EPSS
SaveExploits0References1
CVE-2024-33117
crmebjava v1.3.4 was discovered to contain a Server-Side Request Forgery SSRF via the mergeList method in class com.zbkj.front.pub.ImageMergeController...
7.4AI score0.00468EPSS
SaveExploits0References1
CVE-2024-33117
The crmeb_java e-commerce management system (version 1.3.4 ) is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists in the mergeList method of the com.zbkj.front.pub.ImageMergeController class, which could allow for potential exploitation. As a temporary workaround, it is recomme...
5.3CVSS7.3AI score0.00468EPSS
SaveExploits0References1Affected Software1
20