CVE-2025-31103CWE-502

Untrusted data deserialization vulnerability exists in a-blog cms

High · published March 31, 2025

CVSS v3.0
7.5
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00485 · 40.8th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-03-31T04:54Z
EPSS history
Timeline
  • 31 MAR 04:54Z
    Untrusted data deserialization vulnerability exists in a-blog cms
    cvelistv5