| शीर्षक | crmeb crmeb_java 1.3.4 Unrestricted Upload |
|---|
| विवरण | CRMEB Java contains an arbitrary file write vulnerability in the admin upload functionality. The model parameter from the upload request is used to construct the final filesystem path without whitelist validation, path normalization. |
|---|
| स्रोत | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/EgMOdHyq6oyxhux5vpJcr5cgnAf?from=from_copylink |
|---|
| उपयोगकर्ता | xcxr (UID 86629) |
|---|
| सबमिशन | 09/04/2026 03:40 AM (6 महीनों पहले) |
|---|
| संयम | 02/05/2026 10:22 AM (23 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 360826 [crmeb_java तक 1.3.4 Admin Upload UploadServiceImpl.java model अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|