← All advisories

Medium severity6.5NVD Advisory· Published Oct 8, 2025· Updated Jun 17, 2026

CVE-2025-60834

CVE-2025-60834

Description

A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ghostxbh/uzy-ssm-mall
cpe:2.3:a:ghostxbh:uzy-ssm-mall:1.1.0:*:*:*:*:*:*:*
Uzy Ssm Mall/uzy-ssm-mallcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =1.1.0

Patches

Vulnerability mechanics

References

2

github.com/ChangeYourWay/post/blob/main/uzy-ssm-mall2.mdnvdExploitThird Party Advisory
gist.github.com/ChangeYourWay/5f2b0100b167edf868dd702c0fa3cc35nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.