CVE-2020-21788

In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery)

published June 24, 2021

CVSS
—
EPSS
1%
Percentile
51.2
In the wild
Unconfirmed
What it is

In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00666 · 51.2th percentile
Published
2021-06-24T14:48Z
EPSS history
Timeline
  • 24 JUN 14:48Z
    In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery)
    cvelistv5