5kcrm vulnerabilities
We track 3 vulnerabilities in 5kcrm products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 8, 2026.
Latest 5kcrm vulnerabilities
- 8.8 High severity
WukongCRM: Incorrect Authorization
A security flaw has been discovered in WuKongOpenSource WukongCRM up to 11.3.3. This affects an unknown part of the file gateway/src/main/java/com/kakarote/gateway/service/impl/PermissionServiceImpl.java of the component URL Handler. Performing a manipulation
- 8.8 High severity
WukongCRM: Cross-Site Request Forgery
A vulnerability was found in WuKongOpenSource WukongCRM 9.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/user/updataPassword. The manipulation leads to cross-site request forgery. The atta
- 9.8 Critical severity
wukongcrm: Deserialization of Untrusted Data
An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.