PT-2025-48070

CVE-2025-61168

·

Publicado

2025-11-25

·

Atualizado

2025-12-01

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SIGB PMB version 8.0.1.14
Description An issue in the cms rest.php component allows attackers to execute arbitrary code by unserializing an arbitrary file. The component cms rest.php is susceptible to code execution through the unserialization of files. The vulnerable parameter is not specified.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-502: Deserialization of Untrusted Data
Identificadores relacionados
CVE-2025-61168
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com