MEDIUM
Aridius XYZ News loadMore deserialization
Published Jan 29, 2025
6.9
MEDIUMCVSS 4.0
EPSS 0.49%
Description
A vulnerability has been found in Aridius XYZ up to 20240927 on OpenCart and classified as critical. This vulnerability affects the function loadMore of the component News. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Affected products
-
- Version 20240927StatusaffectedConstraints-
- Version
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1890 Advisory
- https://gist.github.com/mcdruid/52383f40d11becb79ce4033cb46546eb exploit
- https://vuldb.com/?ctiid.293998 signaturepermissions-required
- https://vuldb.com/?id.293998 vdb-entrytechnical-description
- https://vuldb.com/?submit.485445 third-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1890 | Advisory | |
| https://gist.github.com/mcdruid/52383f40d11becb79ce4033cb46546eb | exploit | |
| https://vuldb.com/?ctiid.293998 | signaturepermissions-required | |
| https://vuldb.com/?id.293998 | vdb-entrytechnical-description | |
| https://vuldb.com/?submit.485445 | third-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Jan 29, 2025
Updated Jan 31, 2025
Reserved Jan 29, 2025
Link CVE-2025-0841
CISA Vulnrichment
Updated Jan 31, 2025
ENISA EUVD
EUVD-2025-1890 Assigner VulDB
Published Jan 29, 2025
Updated Jan 31, 2025
Exploited since n/a
Link EUVD-2025-1890