Vulnerabilities

TI-2025-05516 CVE-2025-6106 · GHSA-cqg9-f22h-2vjm

WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery

MEDIUM 57

A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00279 Published 2025-06-16 No fix listed CWE-352

TI-2025-05307 CVE-2025-5879 · GHSA-6j9c-246r-2553

MEDIUM 56

A vulnerability, which was classified as problematic, was found in WuKongOpenSource WukongCRM 9.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00333 Published 2025-06-09 No fix listed CWE-79

TI-2022-23041 CVE-2022-46610 · GHSA-2wx5-x3v9-h4fr

MEDIUM 58

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.18087 Published 2023-01-10 No fix listed CWE-434

TI-2022-17330 CVE-2022-37178 · GHSA-gpfr-jh2q-7fff

MEDIUM 40

An issue was discovered in 72crm 9.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01105 Published 2022-08-24 No fix listed CWE-89

TI-2022-17331 CVE-2022-37181 · GHSA-2ggv-mm3c-gqxm

MEDIUM 45

72crm 9.0 has an Arbitrary file upload vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01268 Published 2022-08-24 No fix listed CWE-434