CVE-2024-33117

crmebjava v1.3.4 was discovered to contain a Server-Side Request Forgery SSRF via the mergeList method in class com.zbkj.front.pub.ImageMergeController...

CVE-2024-33117

CVE-2024-33117 affects crmeb_java v1.3.4, with a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController . Documents indicate the issue exists in this component and provides a practical remediation: temporarily disable the mergeList method and ...