CVE-2025-31103
CVSS 3.0 Score 7.5 of 10 (high)
Details
Published Mar 31, 2025
Updated: Apr 1, 2025
CWE ID 502
Summary
CVE-2025-31103 is a serious vulnerability affecting the a-blog CMS. The issue involves untrusted data deserialization, allowing an attacker to store arbitrary files on the server via a specially crafted request. This can ultimately lead to the execution of an arbitrary script on the affected server. The vulnerability poses a significant risk, particularly to those running the product, and necessitates immediate attention and patching.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.