CVE-2024-57762 - MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file

HIGH

MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file

Published Jan 14, 2025

7.5

HIGH

CVSS 3.1

EPSS 0.51%

MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53730		Advisory
https://gitee.com/wanglingxiao/mysiteforme/issues/IBFVAT		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 14, 2025

Updated Feb 3, 2025

Reserved Jan 9, 2025

Updated Feb 3, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 14, 2025

Updated Feb 3, 2025

Exploited since n/a