Read the docs
TI-2025-04584 Aliases CVE-2025-5114GHSA-gvwq-4r92-cj5h

easysoft zentaopms Editor index.php edit deserialization

Priority MEDIUM 57CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

A vulnerability has been found in easysoft zentaopms 21.5_20250307 and classified as critical. This vulnerability affects the function Edit of the file /index.php?m=editor&f=edit&filePath=cGhhcjovLy9ldGMvcGFzc3dk&action=edit of the component Committer. The manipulation of the argument filePath leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00584 48th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
easysoftzentaopms21.5_20250307—No fix listedCNA
  • zentaopms Vendoreasysoft Affected 21.5_20250307 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:easycorp:zentao:21.5_2025-03-07:*:*:*:*:*:*:*21.5_2025-03-07VulnerableEasyCorp
  • cpe:2.3:a:easycorp:zentao:21.5_2025-03-07:*:*:*:*:*:*:* Versions 21.5_2025-03-07 Vulnerable ·EasyCorp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-5114
  2. 2026-10-03 Alias added: GHSA-gvwq-4r92-cj5h

References

Exploit 2

  • TI-2026-75080 ZenTao PMS Authorization Bypass via action::editComment CVSS 4.0MEDIUM 5.3
  • TI-2026-83119 Missing authorization in ZenTao PMS lets users read private documents CVSS 4.0HIGH 7.1
  • TI-2026-78772 ZenTao PMS Authorization Bypass via Ajax Controller Methods CVSS 4.0HIGH 7.1
  • TI-2026-84800 Improper privilege management in EasySoft ZenTao PMS User module CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences