Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WuKongOpenSource — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting WuKongOpenSource. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WuKongOpenSource is an open-source project focused on providing distributed computing and big data processing capabilities. Historically, the project has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by its six recorded CVEs. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities in these categories suggests potential risks for environments where the software is deployed without proper hardening or timely patching. Organizations implementing WuKongOpenSource should prioritize regular security assessments and updates to mitigate these known weaknesses.

CVE ID Title CVSS Severity Published
CVE-2026-110208 Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys — Wukong AICRM CWE-862 7.1 High 2026-10-13
CVE-2026-110207 Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs — Wukong AICRM CWE-862 8.8 High 2026-10-13
CVE-2026-108707 Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect — Wukong_HRM CWE-287 9.8 Critical 2026-10-11
CVE-2026-108708 Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil — Wukong_HRM CWE-862 8.8 High 2026-10-11
CVE-2026-108689 Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send — Wukong AICRM CWE-639 5.4 Medium 2026-10-11
CVE-2026-2141 WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization — WukongCRM CWE-285 6.3 Medium 2026-02-08
CVE-2025-8852 WuKongOpenSource WukongCRM API Response upload information exposure — WukongCRM CWE-209 4.3 Medium 2025-08-11
CVE-2025-6106 WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery — WukongCRM CWE-352 4.3 Medium 2025-06-16
CVE-2025-5879 WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting — WukongCRM CWE-79 3.5 Low 2025-06-09
CVE-2025-5521 WuKongOpenSource WukongCRM updataPassword cross-site request forgery — WukongCRM CWE-352 4.3 Medium 2025-06-03
CVE-2024-6645 WuKongOpenSource Wukong_nocode AviatorScript ExpressionUtil.java deserialization — Wukong_nocode CWE-502 6.3 Medium 2024-07-10

This page lists every published CVE security advisory associated with WuKongOpenSource. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.