MSFM Fastjson Deserialization Vulnerability in system/table/addField Component

Vulnerability

A fastjson deserialization vulnerability has been identified in MSFM versions prior to 2025.01.01. This vulnerability resides in the system/table/addField component, allowing for potential exploitation through improper handling of serialized data.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution or other unintended actions, depending on the context in which the deserialization occurs.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
8.7
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.