RULE(RULE ID:338257)

Rule General Information
Release Date: 2024-07-16
Rule Name: MetaCRM anotherValue Fastjson Deserialization Remote Code Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: MetaCRM system is a professional customer relationship management software designed to help enterprises strengthen their connection with customers, improve sales performance and customer satisfaction through efficient customer data management, sales tracking, marketing, and customer service functions. There is a vulnerability in the fastjson component used at the otherValue interface of MetaCRM, which allows unauthenticated remote attackers to launch attacks on Meite CRM through the fastjson serialization vulnerability, execute arbitrary code, and gain server privileges.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.