CVE-2026-16222
1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown processing of the file backend/crm/src/main/java/cn/cordys/crm/integration/sso/service/TokenService.java of the component Third Party Endpoint. Performing a manipulation of the argument mkAddress results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.
| CWE | CWE-918 |
| Vendor | 1panel-dev |
| Product | cordyscrm |
| Published | Jul 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for 1panel-dev cordyscrm
Be the first to know when new medium vulnerabilities affecting 1panel-dev cordyscrm are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
1Panel-dev / CordysCRM
1.4.0 1.4.1
References
vuldb.com: https://vuldb.com/vuln/380044 vuldb.com: https://vuldb.com/vuln/380044/cti vuldb.com: https://vuldb.com/cve/CVE-2026-16222 vuldb.com: https://vuldb.com/submit/858043 vuldb.com: https://vuldb.com/submit/858044 github.com: https://github.com/1Panel-dev/CordysCRM/issues/2685 github.com: https://github.com/1Panel-dev/CordysCRM/issues/2686 github.com: https://github.com/1Panel-dev/CordysCRM/
Credits
🔍 liushaozhe (VulDB User) VulDB CNA Team