Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WuKongOpenSource Wukong_nocode AviatorScript ExpressionUtil.java deserialization
Vulnerability Description
A vulnerability was found in WuKongOpenSource Wukong_nocode up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file ExpressionUtil.java of the component AviatorScript Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-271051.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
可信数据的反序列化
Vulnerability Title
Wukong_nocode 代码问题漏洞
Vulnerability Description
Wukong_nocode（悟空无代码）是悟空CRM（WukongCRM）开源的一个无代码平台开发工具。企业可自主地快速开发出适合企业需要的信息化系统。 Wukong_nocode 20230807之前版本存在代码问题漏洞，该漏洞源于文件ExpressionUtil.java会导致反序列化。
CVSS Information
N/A
Vulnerability Type
N/A