PatchTheCVEwangl1989 vulnerabilities
Recent CVEs affecting wangl1989 products. 7 tracked.
wangl1989 has 7 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-03-04. Highest priority: CVE-2024-57766 (score 53/100).
- CVE-2025-26136 CRITICAL 9.8 UPGRADE A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
- CVE-2024-57767 HIGH 8.6 UPGRADE MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file
- CVE-2024-57766 CRITICAL 9.1 UPGRADE MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component sy
- CVE-2024-57765 HIGH 7.5 UPGRADE MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at tab
- CVE-2024-57764 CRITICAL 9.1 UPGRADE MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component sy
- CVE-2024-57763 CRITICAL 9.1 UPGRADE MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component sy
- CVE-2024-57762 HIGH 7.5 UPGRADE MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuratio
FAQ
How do I fix wangl1989 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wangl1989 being exploited right now?
None of the tracked wangl1989 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wangl1989 CVE should I patch first?
CVE-2024-57766 currently ranks highest (53/100): MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component sy.