CVE-2025-61505

{
  "id": "CVE-2025-61505",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-10T19:15:38.257",
  "lastModified": "2026-11-05T22:10:00.203",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "e107 CMS thru 2.3.3 are vulnerable to insecure deserialization in the `install.php` script. The script processes user-controlled input in the `previous_steps` POST parameter using `unserialize(base64_decode())` without validation, allowing attackers to craft malicious serialized data. This could lead to remote code execution, arbitrary file operations, or denial of service, depending on available PHP object gadgets in the codebase."
    },
    {
      "lang": "es",
      "value": "e107 CMS hasta la versión 2.3.3 son vulnerables a deserialización insegura en el script ’install.php’. El script procesa entrada controlada por el usuario en el parámetro POST ’previous_steps’ usando ’unserialize(base64_decode())’ sin validación, permitiendo a los atacantes crear datos serializados maliciosos. Esto podría conducir a ejecución remota de código, operaciones de archivo arbitrarias o denegación de servicio, dependiendo de los gadgets de objetos PHP disponibles en la base de código."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-10T19:00:18.103998Z",
          "id": "CVE-2025-61505",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "2.3.3",
              "matchCriteriaId": "7BF76327-9FAF-4C20-8A78-61D7E30989D9"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/e107inc/e107/blob/master/install.php",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://xancatos.org/cve202561505",
      "source": "[email protected]",
      "tags": [
        "Mitigation",
        "Third Party Advisory"
      ]
    }
  ]
}