CVE-2023-1609

Name of the Vulnerable Software and Affected Versions Zhong Bang CRMEB Java versions up to 1.3.4

Description A issue was found in the function save of the file "/api/admin/store/product/save" API endpoint, which leads to cross site scripting. The attack may be initiated remotely.

Recommendations For versions up to 1.3.4, as a temporary workaround, consider disabling the save function in the "/api/admin/store/product/save" API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.