Medium · 6.5 CVE-2025-25692 EUVD-2025-23178GHSA-wf46-fx4c-gx3r

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a craf…

Published Jul 30, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

References

https://github.com/PrestaShop/PrestaShop
https://github.com/3em0/cve_repo/blob/main/preshop/CVE-2025-25692.md