CVE-2025-60828 — MEDIUM (6.5)

Vulnerability Description

WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
5Kcrm	Wukongcrm	9.0

Related Weaknesses (CWE)

CWE-502

References

https://gist.github.com/ChangeYourWay/424478421d6a78d1f87d324cddcbfd59Third Party Advisory
https://github.com/ChangeYourWay/post/blob/main/WukongCRM-9.0-JAVA.mdExploit

FAQ

What is CVE-2025-60828?

CVE-2025-60828 is a vulnerability with a CVSS score of 6.5 (MEDIUM). WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.

How severe is CVE-2025-60828?

CVE-2025-60828 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-60828?

Check the references section above for vendor advisories and patch information. Affected products include: 5Kcrm Wukongcrm.