Skip to content
Wukongopensource vulnerabilities
Newest
-
wukongopensource wukong aicrm
Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys
CVE-2026-110208
7.1 High
-
wukongopensource wukong aicrm
Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs
CVE-2026-110207
8.7 High
-
wukongopensource wukong hrm
Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil
CVE-2026-108708
8.7 High
-
wukongopensource wukong hrm
Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect
CVE-2026-108707
9.3 Critical
-
wukongopensource wukong aicrm
Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send
CVE-2026-108689
5.3 Medium
-
wukongopensource wukongcrm, 5kcrm wukong crm +1 more
WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization
CVE-2026-2141
5.3 Medium
-
wukongopensource wukongcrm, 5kcrm wukong crm +1 more
WuKongOpenSource WukongCRM API Response upload information exposure
CVE-2025-8852
5.3 Medium
-
wukongopensource wukongcrm, 72crm wukong crm +1 more
WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery
CVE-2025-6106
5.3 Medium
-
wukongopensource wukongcrm, 72crm wukong crm +1 more
WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting
CVE-2025-5879
5.1 Medium
-
wukongopensource wukongcrm, 5kcrm wukong crm +1 more
WuKongOpenSource WukongCRM updataPassword cross-site request forgery
CVE-2025-5521
5.3 Medium
-
wukongopensource wukong nocode
WuKongOpenSource Wukong_nocode AviatorScript ExpressionUtil.java deserialization
CVE-2024-6645
5.3 Medium
-
wukongopensource wukongcrm, 5kcrm wukong crm +1 more
An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute...
CVE-2024-23052
9.8 Critical