Invia #800684: crmeb crmeb_java 1.3.4 Unrestricted Uploadinformazioni

Titolocrmeb crmeb_java 1.3.4 Unrestricted Upload
DescrizioneCRMEB Java contains an arbitrary file write vulnerability in the admin upload functionality. The model parameter from the upload request is used to construct the final filesystem path without whitelist validation, path normalization.
Fonte⚠️ https://fx4tqqfvdw4.feishu.cn/docx/EgMOdHyq6oyxhux5vpJcr5cgnAf?from=from_copylink
Utente
 xcxr (UID 86629)
Sottomissione09/04/2026 03:40 (5 mesi fa)
Moderazione02/05/2026 10:22 (23 days later)
StatoAccettato
Voce VulDB360826 [crmeb_java fino a 1.3.4 Admin Upload UploadServiceImpl.java model escalationi di privilegi]
Punti17

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!