CVE-2024-6645

Summary

CVE-2024-6645 is a critical vulnerability affecting the WuKongOpenSource Wukong_nocode up to version 20230807. The issue lies in an unknown functionality of the file ExpressionUtil.java within the AviatorScript Handler, resulting in deserialization. This vulnerability can be exploited remotely, and the exploit has already been disclosed to the public. Unfortunately, the product does not use versioning, making it unclear which releases are affected or unaffected. The associated vulnerability identifier is VDB-271051.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.