CVE-2023-3233

Name of the Vulnerable Software and Affected Versions Zhong Bang CRMEB versions up to 4.6.0

Description A critical issue has been found, affecting the get image base64 function of the file api/controller/v1/PublicController.php. This leads to server-side request forgery and can be launched remotely. The issue has been publicly disclosed.

Recommendations For Zhong Bang CRMEB versions up to 4.6.0, as a temporary workaround, consider disabling the get image base64 function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.