| Titolo | China Shanghai Lingdang Information Technology Lingdang CRM <= V8.6.5.4 Server-Side Request Forgery |
|---|
| Descrizione | In the latest version of LingDang CRM<=V8.6.5.4, it is vulnerable to server-side request forgery attacks. This allows unauthenticated attackers to make web requests to any location originating from web applications, which can be used to query and modify information from internal services. |
|---|
| Fonte | ⚠️ https://github.com/jackyliu666/dingtalk |
|---|
| Utente | paatiw (UID 32385) |
|---|
| Sottomissione | 18/08/2025 18:33 (12 mesi fa) |
|---|
| Moderazione | 09/09/2025 18:02 (22 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 323233 [Shanghai Lingdang Information Technology Lingdang CRM fino a 8.6.5.4 index_event.php corpurl escalationi di privilegi] |
|---|
| Punti | 18 |
|---|