A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic. This issue affects the function save of the file /api/admin/store/product/save. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223739.
References
| Link | Resource |
|---|---|
| https://github.com/crmeb/crmeb_java/issues/12 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.223739 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.223739 | Third Party Advisory |
| https://github.com/crmeb/crmeb_java/issues/12 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.223739 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.223739 | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/crmeb/crmeb_java/issues/12 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.223739 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.223739 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 3.5 |
Information
Published : 2023-03-23 20:15
Updated : 2024-11-21 07:39
NVD link : CVE-2023-1609
Mitre link : CVE-2023-1609
CVE.ORG link : CVE-2023-1609
JSON object : View
Products Affected
crmeb
- crmeb_java
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')