3 matches found
CVE-2024-33117
crmebjava v1.3.4 was discovered to contain a Server-Side Request Forgery SSRF via the mergeList method in class com.zbkj.front.pub.ImageMergeController...
5.3CVSS7.4AI score0.00468EPSS
SaveExploits0References1
PT-2024-25119 · Unknown · Crmeb Java
Name of the Vulnerable Software and Affected Versions: crmeb java version 1.3.4 Description: The issue is related to a Server-Side Request Forgery SSRF in the mergeList method of the ImageMergeController class. This allows for potential exploitation. No information is provided about the estimated...
5.3CVSS6.3AI score0.00468EPSS
SaveExploits0References8
20