CVE-2024-36837 | CRMEB 5.2.2 ProductController.php getProductList information disclosure

A vulnerability classified as problematic was found in CRMEB 5.2.2. Affected by this vulnerability is the function getProductList of the file ProductController.php. The manipulation leads to information disclosure.

This vulnerability is known as CVE-2024-36837. The attack can be launched remotely. There is no exploit available.