Medium
CVSS 6.5
Overview
A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.
CVE-2025-25692
A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 6.5 (MEDIUM)
- Detected tags: deserialization, rce (tag impact: VERY HIGH)
Recommended actions:
- Avoid untrusted deserialization; prefer safe formats (JSON) and signatures.
- Patch/upgrade immediately (remote code execution).
- Reduce exposure (WAF/segmentation), minimize attack surface.