提出 #636882: China Shanghai Lingdang Information Technology Lingdang CRM <= V8.6.5.4 Server-Side Request Forgery情報

タイトルChina Shanghai Lingdang Information Technology Lingdang CRM <= V8.6.5.4 Server-Side Request Forgery
説明In the latest version of LingDang CRM<=V8.6.5.4, it is vulnerable to server-side request forgery attacks. This allows unauthenticated attackers to make web requests to any location originating from web applications, which can be used to query and modify information from internal services.
ソース⚠️ https://github.com/jackyliu666/dingtalk
ユーザー
 paatiw (UID 32385)
送信2025年08月18日 18:33 (10 月 ago)
モデレーション2025年09月09日 18:02 (22 days later)
ステータス承諾済み
VulDBエントリ323233 [Shanghai Lingdang Information Technology Lingdang CRM 迄 8.6.5.4 index_event.php corpurl 特権昇格]
ポイント18

Do you know our Splunk app?

Download it now for free!