MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.

Published Jan 14, 2025 · Updated Feb 3, 2025 · Assigned by mitre