Critical severity9.8NVD Advisory· Published Apr 4, 2025· Updated Jun 17, 2026
CVE-2025-2244
CVE-2025-2244
Description
A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-supplied input without validation. By crafting a malicious serialized payload, an attacker can trigger PHP object injection, perform a file write, and gain arbitrary command execution on the host system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:*:*:*:*range: <6.41.2-1
- (no CPE)
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.