MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Link | Tags |
---|---|
https://gitee.com/wanglingxiao/mysiteforme/issues/IBFVAT | third party advisory exploit |