Advisories · Technology
crmeb_java.
Every CVE that names crmeb_java among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints
- crmeb_java
- Broken access control
- CVSS 6.9 Medium
crmeb crmeb_java base64 Qrcode Endpoint RestTemplateUtil.java RestTemplate.getForEntity server-side request forgery
- crmeb_java
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
crmeb_java Admin Upload UploadServiceImpl.java unrestricted upload
- crmeb_java
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
crmeb_java WeChatMessageController.java webHook xml external entity reference
- crmeb_java
- XML external entities (XXE)
- CWE-610