exploitDog

GHSA-245h-h68p-v4jq

Опубликовано: 06 мая 2024

Источник: github

Github: Не прошло ревью

CVSS3: 5.3

Описание

crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController.

crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController.

Ссылки

EPSS

Процентиль: 29%

0.00103

Низкий

5.3 Medium

CVSS3

CVE ID

Дефекты

CWE-918

Связанные уязвимости

CVE-2024-33117

CVSS3: 5.3

nvd

больше 1 года назад

crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController.

EPSS

Процентиль: 29%

0.00103

Низкий

5.3 Medium

CVSS3

CVE ID

Дефекты

CWE-918