CVE-2024-6944

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-6944

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6944.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-6944

Published

2024-07-21T07:31:04.139Z

Modified

2026-07-15T01:49:00.459963311Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

ZhongBangKeJi CRMEB PublicController.php get_image_base64 deserialization

Details

A vulnerability was found in ZhongBangKeJi CRMEB up to 5.4.0 and classified as critical. Affected by this issue is the function getimagebase64 of the file PublicController.php. The manipulation of the argument file leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-272066 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cwe_ids": [
        "CWE-502"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6944.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.0"
                },
                {
                    "last_affected": "5.0"
                },
                {
                    "introduced": "5.1"
                },
                {
                    "last_affected": "5.1"
                },
                {
                    "introduced": "5.2"
                },
                {
                    "last_affected": "5.2"
                },
                {
                    "introduced": "5.3"
                },
                {
                    "last_affected": "5.3"
                },
                {
                    "introduced": "5.4"
                },
                {
                    "last_affected": "5.4"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/crmeb/crmeb

Affected ranges

Type

GIT

Repo

https://github.com/crmeb/crmeb

Events

Introduced

Last affected

2415bb7b7df754bcd3a0131617912f37ed42c349

Database specific

{
    "cpe": "cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.4.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v2.*

v2.6

v2.6.0

v4.*

v4.4.2

v4.4.4

v4.6.0

v4.7.0

v5.*

v5.2.0

v5.3.0

v5.4.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6944.json"