MSFM Fastjson Deserialization Vulnerability

Vulnerability

A deserialization vulnerability in the Fastjson library has been identified in MSFM versions prior to 2025.01.01. This vulnerability allows for unsafe deserialization of data, which could potentially be exploited to execute arbitrary code or cause other unintended behavior in the application.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the server where MSFM is running.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
8.7
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.