Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-25692

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

Published

2025-07-30T17:15:27.190

Last Modified

2025-08-06T16:21:43.970

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-77
CWE-502

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	prestashop	prestashop	8.2.0	Yes

References

http://prestashop.com Product ([email protected])
https://github.com/3em0/cve_repo/blob/main/preshop/CVE-2025-25692.md Exploit, Third Party Advisory ([email protected])
https://github.com/PrestaShop/PrestaShop Product ([email protected])