Cyber Resilience

CVE-2024-57762

HighPublic PoCRCE

Published: 15 January 2025

Published
15 January 2025
Modified
10 April 2025
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0041 61.6th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-57762 is a high-severity Deserialization of Untrusted Data (CWE-502) vulnerability in Wangl1989 Mysiteforme. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 38.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2024-57762 is a deserialization vulnerability (CWE-502) affecting MSFM versions prior to v2025.01.01. The issue arises in the handling of the pom.xml configuration file, allowing improper deserialization of untrusted data.

The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating that an unauthenticated attacker can exploit it remotely with low complexity and no user interaction. Successful exploitation enables high-impact confidentiality violations, such as unauthorized access to sensitive data, without affecting integrity or availability.

Mitigation involves updating to MSFM v2025.01.01 or later, as indicated by the vulnerability's versioning scope. Additional details are available in the advisory at https://gitee.com/wanglingxiao/mysiteforme/issues/IBFVAT.

EU & UK References

Vulnerability details

MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.

CWE(s)
CWE-502

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
Why these techniques?

Shiro deserialization vulnerability in MSFM web application enables remote code execution via manipulated RememberMe cookie over HTTP to public-facing endpoint (/index), exploiting vulnerable Shiro version <1.8.0 with hardcoded key.

CVEs Like This One

CVE-2024-57763Same product: Wangl1989 Mysiteforme
CVE-2024-13136Same product: Wangl1989 Mysiteforme
CVE-2024-57766Same product: Wangl1989 Mysiteforme
CVE-2024-57764Same product: Wangl1989 Mysiteforme
CVE-2025-26136Same product: Wangl1989 Mysiteforme
CVE-2024-13138Same product: Wangl1989 Mysiteforme
CVE-2024-13139Same product: Wangl1989 Mysiteforme
CVE-2024-57767Same product: Wangl1989 Mysiteforme
CVE-2024-57765Same product: Wangl1989 Mysiteforme
CVE-2024-13770Shared CWE-502

Affected Assets

wangl1989
mysiteforme
≤ 2025-01-01

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-2 Flaw Remediation good match
prevent

SI-2 mandates timely identification, reporting, and correction of system flaws, directly mitigating CVE-2024-57762 by patching MSFM to v2025.01.01 or later.

SI-10 Information Input Validation good match
prevent

SI-10 requires validation of information inputs such as the pom.xml configuration file, preventing improper deserialization of untrusted data.

RA-5 Vulnerability Monitoring and Scanning partial match
detect

RA-5 enables vulnerability scanning to identify the deserialization flaw in MSFM prior to exploitation.

References