CVE-2025-2043

LinZhaoguan pb-cms Add New Topic admin#themes deserialization

CVSS 5.1 MEDIUMEPSS 0.5%CWE-20 CWE-502

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

06 mar 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /admin#themes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Produtos afetados

LinZhaoguan · pb-cms

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/Jingyi-u/Pb-cms2/blob/main/README.md https://vuldb.com/?ctiid.298787 https://vuldb.com/?id.298787 https://vuldb.com/?submit.513243