CVE-2024-33117

crmebjava v1.3.4 was discovered to contain a Server-Side Request Forgery SSRF via the mergeList method in class com.zbkj.front.pub.ImageMergeController...

CVE-2024-33117

The crmeb_java e-commerce management system (version 1.3.4 ) is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists in the mergeList method of the com.zbkj.front.pub.ImageMergeController class, which could allow for potential exploitation. As a temporary workaround, it is recomme...