Jeson Customer Relationship Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:defaultfuction:jeson-customer-relationship-management-system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Defaultfuction (60517c04-29af-55ee-ba6c-e0375f89c0bf) |
|---|---|
| Product | Jeson Customer Relationship Management System (a1da7748-72ec-5eaa-badb-cc50587b365a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4623 |
vulnerable | 2026-06-08 08:05:13.621141 |
DefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery
HIGH (7.3)
A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file /api/System.php of the component API Module. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The identifier of the patch is f76e7123fe093b8675f88ec8f71725b0dd186310/98bd4eb07fa19d4f2c5228de6395580013c97476. It is suggested to install a patch to address this issue.
Published: 2026-03-24T01:39:39.469Z
Updated: 2026-03-24T15:12:29.310Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.