VYPR
← All advisories
High severity7.3NVD Advisory· Published Jun 3, 2026· Updated Jun 4, 2026

CVE-2026-10771

CVE-2026-10771

Description

A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Crmeb/Crmeb Javareferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <1.4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.