CVE-2020-21787

Name of the Vulnerable Software and Affected Versions: CRMEB versions 3.1.0 and later

Description: The issue concerns a File Upload Getshell vulnerability via the /crmeb/crmeb/services/UploadService.php endpoint. This allows for potential exploitation.

Recommendations: For CRMEB versions 3.1.0 and later, as a temporary workaround, consider disabling the file upload functionality in UploadService.php until a patch is available. Restrict access to the /crmeb/crmeb/services/UploadService.php endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.