CVE-2025-7876: Deserialization of Untrusted Data

A vulnerability classified as critical was found in Metasoft 美特软件 MetaCRM up to 6.4.2. This vulnerability affects the function AnalyzeParam of the file download.jsp. The manipulation of the argument p leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed t...

PT-2025-30178

Name of the Vulnerable Software and Affected Versions Metasoft MetaCRM versions through 6.4.2 Description A critical vulnerability exists in Metasoft MetaCRM. The vulnerability affects the AnalyzeParam function within the download.jsp file. Manipulation of the p argument leads to deserialization,...