Описание
An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.
Ссылки
- ExploitVendor Advisory
- ExploitIssue TrackingVendor Advisory
- ExploitVendor Advisory
- ExploitIssue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:5kcrm:wukongcrm:9.0.1_20191202:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.76819
Высокий
9.8 Critical
CVSS3
Дефекты
CWE-502
CWE-502
Связанные уязвимости
CVSS3: 9.8
github
почти 2 года назад
An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.
EPSS
Процентиль: 99%
0.76819
Высокий
9.8 Critical
CVSS3
Дефекты
CWE-502
CWE-502