Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.2%	CVE-2026-7673crmeb_java · Unrestricted Upload Medium5.1EPSS 0.2%2026-05-03CVE Database V5CVE-2026-7673 CVE-2026-7673 is a medium severity vulnerability in crmeb_java versions up to 1.3.4 that allows unrestricted file upload via manipulation of the 'model' argument in the Admin Upload component. The vulnerability is remotely exploitable and an exploit is publicly available. The vendor has not responded or provided a patch. No official remediation or fix is currently confirmed. EPSS 0.2%Vulnerability	CVE Database V5	2026-05-03
Medium	5.3	EPSS 0.5%	CVE-2024-33117crmeb_java · Server-Side Request Forgery (SSRF) Medium5.3EPSS 0.5%2024-05-06CVE Database V5CVE-2024-33117 crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController. EPSS 0.5%Vulnerability CWE-918	CVE Database V5	2024-05-06

Page 1 of 1