crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController.
References
| Link | Resource |
|---|---|
| https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33117.txt | Third Party Advisory |
| https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33117.txt | Third Party Advisory |
Configurations
History
11 Jun 2025, 12:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:crmeb:crmeb_java:1.3.4:*:*:*:*:*:*:* | |
| References | () https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33117.txt - Third Party Advisory | |
| First Time |
Crmeb
Crmeb crmeb Java |
06 Dec 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CWE | CWE-918 |
21 Nov 2024, 09:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33117.txt - |
07 May 2024, 13:39
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
06 May 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-06 20:15
Updated : 2025-06-11 12:04
NVD link : CVE-2024-33117
Mitre link : CVE-2024-33117
CVE.ORG link : CVE-2024-33117
JSON object : View
Products Affected
crmeb
- crmeb_java
CWE
CWE-918
Server-Side Request Forgery (SSRF)