CVE-2024-25469: Crmeb Java

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component.

Affected products

• Crmeb Crmeb Java: version 1.3.4 only

Published 2024-02-23. Last modified 2026-06-17.