CVE-2023-3232

A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical. This issue affects some unknown processing of the file /api/wechat/app_auth of the component Image Upload. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231503. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-502

• https://github.com/HuBenLab/HuBenVulList/blob/main/CRMEB%20is%20vulnerable%20to%20Broken%20Access%20Control.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.231503Permissions Required, Third Party Advisory
• https://vuldb.com/?id.231503Third Party Advisory
• https://github.com/HuBenLab/HuBenVulList/blob/main/CRMEB%20is%20vulnerable%20to%20Broken%20Access%20Control.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.231503Permissions Required, Third Party Advisory
• https://vuldb.com/?id.231503Third Party Advisory

Published

Jun 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32314vm2 is a sandbox that can run untrusted code with Node's bui…10
• CVE-2023-32315Openfire is an XMPP server licensed under the Open Source Ap…7.5
• CVE-2023-32316CloudExplorer Lite is an open source cloud management tool. …4.3
• CVE-2023-32317Autolab is a course management service that enables auto-gra…7.2
• CVE-2023-32318Nextcloud server provides a home for data. A regression in t…6.7
• CVE-2023-32319Nextcloud server is an open source personal cloud implementa…6.5
• CVE-2023-32320Nextcloud Server is a data storage system for Nextcloud, a s…7.5
• CVE-2023-32321CKAN is an open-source data management system for powering d…9.8
• CVE-2023-32322Ombi is an open source application which allows users to req…4.9
• CVE-2023-32323Synapse is an open-source Matrix homeserver written and main…4.3
• CVE-2023-32324OpenPrinting CUPS is an open source printing system. In vers…5.5
• CVE-2023-32325PostHog-js is a library to interface with the PostHog analyt…6.1