CVE-2024-23052

An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

4.91% chance of exploitation in the next 30 days, 92nd percentile

Published

2024-02-01

Updated

2024-08-27

Proof-of-concept exploits (1)

• WuKongOpenSource/WukongCRM-9.0-JAVA/issues/28713★ · 2022-06-21

Security advisories

• By-Yexing/Vulnerability_JAVA/blob/main/2024/WukongCRM_9.0.md#1remote-code-execution-vulne…

References

• CVE Record
• NVD entry

Related

• CVE-2024-6645
• CVE-2025-8852