CVE-2025-25691 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.
Medium CVSS: 6.5

CVE-2025-25691

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.
Vendor
Prestashop
Product
Prestashop
CWE
CWE-77
Yayın Tarihi
2025-07-30 17:15:27
Güncelleme
2025-08-06 16:25:47
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-77 Prestashop MEDIUM Prestashop 2025

Referanslar

http://dem0.com http://dem0.com/admin/index.php/improve/design/themes/import?_token=btRUtV2Om2noliZZjeFQZhlMY3gYivjABbPOjP91L6U http://prestashop.com https://github.com/3em0/cve_repo/blob/main/preshop/CVE-2025-25691.md https://github.com/PrestaShop/PrestaShop