What is CVE-2025-1113?

CVE-2025-1113 is a medium-severity vulnerability in Taisan Tarzan-Cms, classified under Improper Input Validation. CVSS score: 6.3/10. Published 2025-02-07.

How severe is CVE-2025-1113?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Deserialization in Taisan Tarzan-Cms

CVE-2025-1113

A vulnerability was found in taisan tarzan-cms up to 1.0.0. It has been rated as critical. This issue affects the function upload of the file /admin#themes of the component Add Theme Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (39.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Taisan Tarzan-cms — versions 1.0, 1.0.0

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, VDB Entry, Third Party Advisory, vdb-entry)
cna@vuldb.com (signature, Permissions Required, permissions-required, VDB Entry)
cna@vuldb.com (issue-tracking, Exploit, exploit, Issue Tracking)

Frequently asked questions

What is CVE-2025-1113?: CVE-2025-1113 is a medium-severity vulnerability in Taisan Tarzan-Cms, classified under Improper Input Validation. CVSS score: 6.3/10. Published 2025-02-07.
How severe is CVE-2025-1113?: Medium severity. CVSS v3 base score is 6.3 out of 10.