Security Advisory
CVE-2020-25466
9.8
CRITICAL
Vulnerability Description
A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code.
Published Date
October 23, 2020
Official Source
NIST NVD Advisory