CVE-2025-31103

7.5 highEPSS 0.5%

High (7.5) in appleple a-blog cms. EPSS 0.5% chance of exploitation in the next 30 days.

Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2025-03-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

appleple:a-blog_cms

References

https://developer.a-blogcms.jp/blog/news/entry-4197.html
https://developer.a-blogcms.jp/blog/news/security-update202503.html
https://jvn.jp/en/jp/JVN66982699/

Check your stack JSON