CNNVD-202507-3413 Information

Jul 27, 2025 cve

CNNVD ID

CNNVD-202507-3413

CVE-2025-8227

CNNVD Published: 2025-07-27

Description (Chinese)

ChanCMS是中国yanyutao0402个人开发者的一个内容管理系统。 ChanCMS 3.1.2及之前版本存在代码问题漏洞，该漏洞源于文件/collect/getArticle中参数taskUrl的错误操作导致反序列化。

Description (English)

ChanCMS is a content management system for the yanyutao0402 individual developers in China. ChanCMS 3.1.2 and previous versions have a code problem loophole, which stems from the error of the parameter TaskUrl in the file/collect/getArticle, which led to the inverseization.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

个人开发者

Published

2025-07-27

Last Modified

2026-02-24

References

https://gitee.com/yanyutao0402/ChanCMS/commit/33d9bb464353015aaaba84e27638ac9a3912795d https://gitee.com/yanyutao0402/ChanCMS/issues/ICLP81 https://vuldb.com/?id.317815 https://vuldb.com/?ctiid.317815 https://vuldb.com/?submit.622169 https://gitee.com/yanyutao0402/ChanCMS/tree/V3.1.3 https://access.redhat.com/security/cve/cve-2025-8227 https://nvd.nist.gov/vuln/detail/CVE-2025-8227

Patch

https://gitee.com/yanyutao0402/ChanCMS/releases/tag/V3.1.3

Share on: