Crmeb Java vulnerabilities

2 known vulnerabilities in Crmeb Java from Crmeb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  crmeb_java: Server-Side Request Forgery

  CVE-2026-10771Jun 3, 2026Crmeb

  A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument u

• 7.5 High severity

  crmeb_java: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-25469Feb 23, 2024Crmeb

  SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component.