A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical. This issue affects some unknown processing of the file /api/wechat/app_auth of the component Image Upload. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231503. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/HuBenLab/HuBenVulList/blob/main/CRMEB%20is%20vulnerable%20to%20Broken%20Access%20Control.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.231503 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.231503 | Third Party Advisory |
Configurations
History
22 Jun 2023, 15:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://vuldb.com/?id.231503 - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?ctiid.231503 - Permissions Required, Third Party Advisory | |
| References | (MISC) https://github.com/HuBenLab/HuBenVulList/blob/main/CRMEB%20is%20vulnerable%20to%20Broken%20Access%20Control.md - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Crmeb
Crmeb crmeb |
|
| CPE | cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:* |
14 Jun 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-14 06:15
Updated : 2024-04-11 01:21
NVD link : CVE-2023-3232
Mitre link : CVE-2023-3232
CVE.ORG link : CVE-2023-3232
JSON object : View
Products Affected
crmeb
- crmeb
CWE
CWE-502
Deserialization of Untrusted Data