medium6.5
CVE-2025-60828
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.
Impact
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 5kcrm | Wukong Crm | Version 9.0 |