CVE-2025-5114 Details
Description
A vulnerability has been found in easysoft zentaopms 21.5_20250307 and classified as critical. This vulnerability affects the function Edit of the file /index.php?m=editor&f=edit&filePath=cGhhcjovLy9ldGMvcGFzc3dk&action=edit of the component Committer. The manipulation of the argument filePath leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A critical deserialization vulnerability has been identified in Easysoft ZenTaoPMs version 21.5_20250307. The issue resides in the editor component, specifically within the 'Edit' function of the 'index.php' file. The vulnerability is triggered by manipulating the 'filePath' argument, which leads to improper validation of file paths. This flaw allows remote attackers to exploit the application by sending crafted requests that bypass security checks, potentially leading to unauthorized access to sensitive system files.
To address this vulnerability, it is recommended to implement proper validation of file paths by disallowing PHP wrapper protocols, establishing a whitelist of allowed file extensions and directories, using secure file reading methods that do not support wrapper protocols, and conducting thorough input validation before processing file paths.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 23, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/3em0/cve_repo/blob/main/zentaopms/Phar%20Bypass%20Vulnerability%20in%20ZenTao.md | [email protected] | ExploitMitigationThird Party Advisory |
| https://github.com/3em0/cve_repo/blob/main/zentaopms/Phar%20Bypass%20Vulnerability%20in%20ZenTao.md#exploitation | [email protected] | ExploitThird Party Advisory |
| https://vuldb.com/?ctiid.310090 | [email protected] | Permissions RequiredVDB Entry |
| https://vuldb.com/?id.310090 | [email protected] | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?submit.570727 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
| CWE-20 | Improper Input Validation | [email protected] |
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| easycorp zentao | 21.5_2025-03-07 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 5, 2025 | Initial Analysis | [email protected] |
| May 23, 2025 | New CVE Received | [email protected] |