Vulnerabilities in WuKongOpenSource
11 resultsCVE-2026-108707CRITICALWukong_HRM through commit 186115e Authentication Bypass via ParamAspectEPSS 0.6%CVE-2024-6645MEDIUMWuKongOpenSource Wukong_nocode AviatorScript ExpressionUtil.java deserializationEPSS 0.5%CVE-2026-110207HIGHWukong AICRM through 20260610 Missing Authorization in User and Role Management APIsEPSS 0.4%CVE-2026-2141MEDIUMWuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorizationEPSS 0.4%CVE-2025-8852MEDIUMWuKongOpenSource WukongCRM API Response upload information exposureEPSS 0.4%CVE-2026-110208HIGHWukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider KeysEPSS 0.4%CVE-2025-5879MEDIUMWuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scriptingEPSS 0.3%CVE-2025-5521MEDIUMWuKongOpenSource WukongCRM updataPassword cross-site request forgeryEPSS 0.3%CVE-2026-108708HIGHWukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtilEPSS 0.3%CVE-2025-6106MEDIUMWuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgeryEPSS 0.3%CVE-2026-108689MEDIUMWukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/sendEPSS 0.2%