CVE-2024-48178

Published October 28th, 2024

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg parameter.

dabaizhizhu/123

Cross-site scripting exists in Finnesoft

GitHub