PT-2025-7801

CVE-2024-57685

Published

2025-02-24

Updated

2025-03-25

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions sparkshop versions 1.1.7 and earlier

Description The issue allows a remote attacker to execute arbitrary code via a crafted phar file.

Recommendations For sparkshop versions 1.1.7 and earlier, update to a version that fixes this issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾