CVE-2024-33117: Crmeb Java

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController.

Affected products

• Crmeb Crmeb Java: version 1.3.4 only

Published 2024-05-06. Last modified 2026-06-17.