CVE-2024-23052

CriticalCVSS 9.8

Published: 29/02/2024(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.87%

91th percentile - higher than 91% of all known CVEs

Summary

A vulnerability in WukongCRM version 72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.

Risk Assessment

An attacker can take over the CRM server, leading to customer data theft, database modification, or full system compromise.

Recommendation

Immediately update WukongCRM to the latest version and apply the security patch for the fastjson component.

Original NVD description (English source)

An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.