| Название | China Shanghai Lingdang Information Technology Lingdang CRM <= V8.6.5.4 Server-Side Request Forgery |
|---|
| Описание | In the latest version of LingDang CRM<=V8.6.5.4, it is vulnerable to server-side request forgery attacks. This allows unauthenticated attackers to make web requests to any location originating from web applications, which can be used to query and modify information from internal services. |
|---|
| Источник | ⚠️ https://github.com/jackyliu666/dingtalk |
|---|
| Пользователь | paatiw (UID 32385) |
|---|
| Представление | 18.08.2025 18:33 (1 Год назад) |
|---|
| Модерация | 09.09.2025 18:02 (22 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 323233 [Shanghai Lingdang Information Technology Lingdang CRM до 8.6.5.4 index_event.php corpurl эскалация привилегий] |
|---|
| Баллы | 18 |
|---|