CVE-2025-2244 Information

Description

A vulnerability in the sendMailFromRemoteSource method in Emails.php  as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-supplied input without validation. By crafting a malicious serialized payload an attacker can trigger PHP object injection perform a file write and gain arbitrary command execution on the host system.

Reference

http://bitdefender.com/support/security-advisories/insecure-php-deserialization-issue-in-gravityzone-console-va-12634