Gửi #636882: China Shanghai Lingdang Information Technology Lingdang CRM <= V8.6.5.4 Server-Side Request Forgerythông tin

tiêu đềChina Shanghai Lingdang Information Technology Lingdang CRM <= V8.6.5.4 Server-Side Request Forgery
Mô tảIn the latest version of LingDang CRM<=V8.6.5.4, it is vulnerable to server-side request forgery attacks. This allows unauthenticated attackers to make web requests to any location originating from web applications, which can be used to query and modify information from internal services.
Nguồn⚠️ https://github.com/jackyliu666/dingtalk
Người dùng
 paatiw (UID 32385)
Đệ trình18/08/2025 18:33 (cách đây 1 Năm)
Kiểm duyệt09/09/2025 18:02 (22 days later)
Trạng tháiđược chấp nhận
Mục VulDB323233 [Shanghai Lingdang Information Technology Lingdang CRM đến 8.6.5.4 index_event.php corpurl nâng cao đặc quyền]
điểm18

Do you want to use VulDB in your project?

Use the official API to access entries easily!