ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score

1 result for “CVE-2020-21788”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-21788
Published
2021-06-24
CVSS:
4.3
ShadowTrackr CVSS:
0.6
Summary:
In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php.