CVE-2024-23052

Severity

critical

Source

NVD · cve

Published

2024-02-29

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-23052

Players implicated

5kcrm · vendor wukong crm · product

Description

An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.