CVE-2024-57764 - MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add

CRITICAL

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add

Published Jan 14, 2025

9.1

CRITICAL

CVSS 3.1

EPSS 0.51%

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53732		Advisory
https://gitee.com/wanglingxiao/mysiteforme/issues/IBFVCZ		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 14, 2025

Updated Feb 3, 2025

Reserved Jan 9, 2025

Updated Feb 3, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 14, 2025

Updated Feb 3, 2025

Exploited since n/a