CVE-2020-21788: SSRF
Published Jun 24, 2021
·Updated
In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php.
Affected Software
1 affected component
crmeb crmeb=3.1.0\+
Event History
Jun 24, 2021
CVE Published
via MITRE·02:48 PM
Data Sourced
via MITRE·02:48 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-21788?
The severity of CVE-2020-21788 is considered medium due to the potential for SSRF exploitation.
2
How do I fix CVE-2020-21788?
To fix CVE-2020-21788, update your CRMEB installation to the latest version that addresses this vulnerability.
3
What kind of attack does CVE-2020-21788 facilitate?
CVE-2020-21788 facilitates Server-Side Request Forgery (SSRF) attacks due to improper domain name filtering.
4
Which versions of CRMEB are affected by CVE-2020-21788?
CVE-2020-21788 affects all CRMEB versions starting from 3.1.0 and higher before the fix is applied.
5
Where in the codebase is CVE-2020-21788 located?
CVE-2020-21788 is located in the file /crmeb/app/admin/controller/store/CopyTaobao.php.