| 标题 | China Shanghai Lingdang Information Technology Lingdang CRM <= V8.6.5.4 Server-Side Request Forgery |
|---|
| 描述 | In the latest version of LingDang CRM<=V8.6.5.4, it is vulnerable to server-side request forgery attacks. This allows unauthenticated attackers to make web requests to any location originating from web applications, which can be used to query and modify information from internal services. |
|---|
| 来源 | ⚠️ https://github.com/jackyliu666/dingtalk |
|---|
| 用户 | paatiw (UID 32385) |
|---|
| 提交 | 2025-08-18 18時33分 (1 年前) |
|---|
| 管理 | 2025-09-09 18時02分 (22 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 323233 [Shanghai Lingdang Information Technology Lingdang CRM 直到 8.6.5.4 index_event.php corpurl 权限提升] |
|---|
| 积分 | 18 |
|---|