← All advisories

Medium severity6.5NVD Advisory· Published Oct 8, 2025· Updated Jul 14, 2026

CVE-2025-60828

CVE-2025-60828

Description

WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

5kcrm/Wukongcrm
cpe:2.3:a:5kcrm:wukong_crm:9.0:*:*:*:*:*:*:*
WukongCRM/WukongCRMcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 9.0-JAVA

Patches

Vulnerability mechanics

References

2

github.com/ChangeYourWay/post/blob/main/WukongCRM-9.0-JAVA.mdnvdExploit
gist.github.com/ChangeYourWay/424478421d6a78d1f87d324cddcbfd59nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.