48 matches found
CVE-2024-57763: Deserialization of Untrusted Data
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField...
CVE-2024-57765: Improper Neutralization of Special Elements used in an SQL Command
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...
CVE-2024-57762: Deserialization of Untrusted Data
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file...
CVE-2024-57764: Deserialization of Untrusted Data
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add...
CVE-2024-57766: Deserialization of Untrusted Data
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField...
CVE-2024-57767: Server-Side Request Forgery (SSRF)
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery SSRF via the component /file/download...
CVE-2024-57766
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField...
CVE-2024-57763
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField...
CVE-2024-57765
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...
CVE-2024-57765
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...
PT-2025-3560 · Msfm +1 · Msfm +1
Name of the Vulnerable Software and Affected Versions: MSFM versions prior to 2025.01.01 Description: The issue is related to a fastjson deserialization vulnerability in the component system/table/editField. This vulnerability was discovered in MSFM. Recommendations: For versions prior to...
CVE-2024-57766
The permission management system Mysiteforme (MSFM) versions prior to 2025.01.01 are vulnerable to a fastjson deserialization flaw. The issue is located within the system/table/editField component. While no specific patch version is currently identified in the documentation, it is recommended to ...
CVE-2024-57762
The permission management system Mysiteforme (MSFM) versions prior to v2025.01.01 are affected by a deserialization vulnerability triggered via the pom.xml configuration file. This flaw could allow an attacker to execute malicious actions by exploiting insecure deserialization processes. To remed...
CVE-2024-57763
The MSFM permission management system is vulnerable to a fastjson deserialization vulnerability in the system/table/addField component in versions prior to 2025.01.01 . This flaw allows for the exploitation of untrusted data during deserialization. To mitigate this risk, users are advised to disa...
CVE-2024-57764
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add...
PT-2025-3556 · Msfm · Msfm
Name of the Vulnerable Software and Affected Versions: MSFM versions prior to 2025.01.01 Description: The issue is related to a deserialization vulnerability that can be exploited via the pom.xml configuration file. This vulnerability was discovered in MSFM. Recommendations: For versions prior to...
CVE-2024-57762
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file...
CVE-2024-57764
MSFM (Mysiteforme) versions prior to 2025.01.01 are vulnerable to a fastjson deserialization issue within the system/table/add component. This vulnerability can be exploited through the same component. As a temporary workaround, it is recommended to restrict access to the system/table/add compone...