CVE-2025-8852

2.1 lowEPSS 0.4%

Low (2.1) in 5kcrm wukong crm. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs: CWE-209, CWE-200
Published: 2025-08-11
Modified: 2026-07-14
Record from: the NVD, synced 2026-10-19

Affected

5kcrm:wukong_crm

References

https://github.com/WuKongOpenSource/WukongCRM-11.0-JAVA/issues/26
https://github.com/WuKongOpenSource/WukongCRM-11.0-JAVA/issues/26#issue-3272864284
https://vuldb.com/?ctiid.319383
https://vuldb.com/?id.319383
https://vuldb.com/?submit.624693

Check your stack JSON