crmeb vulnerabilities

CVEs whose affected-version data names the crmeb package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-25466Critical· 9.8

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code.

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code.

▾ Midnightcrmeb · crmebEPSS 2.6%via NVD

crmeb vulnerabilities (CVEs) · VulnSea