NetSight
high7.2

CVE-2023-25223

CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list.

Impact

CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list.

Affected products

VendorProductAffected versions
CrmebCrmeb Java
through 1.3.4

Weakness classification

References