Skip to content
OpenAdvisories

Product · WuKongOpenSource

WukongCRM

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-2141

    WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization

    A security flaw has been discovered in WuKongOpenSource WukongCRM up to 11.3.3. This affects an unknown part of the file gateway/src/main/java/com/kakarote/gateway/service/impl/PermissionServiceImpl.java of the component URL Handler. Performing a manipulation…

    WuKongOpenSource WukongCRM
  • Medium 4.3
    CVE-2025-8852

    WuKongOpenSource WukongCRM API Response upload information exposure

    A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. It is possible to initia…

    WuKongOpenSource WukongCRM
  • Medium 4.3
    CVE-2025-6106

    WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery

    A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic. This issue affects some unknown processing of the file AdminRoleController.java. The manipulation leads to cross-site request forgery. The attack may be initiated remot…

    WuKongOpenSource WukongCRM
  • Medium 4.3
    CVE-2025-5521

    WuKongOpenSource WukongCRM updataPassword cross-site request forgery

    A vulnerability was found in WuKongOpenSource WukongCRM 9.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/user/updataPassword. The manipulation leads to cross-site request forgery. The att…

    WuKongOpenSource WukongCRM