BaseFortify

Publication date: 2025-10-08

Last updated on: 2025-10-10

Assigner: MITRE

Description

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-08

Last Modified

2025-10-10

Generated

2026-07-06

AI Q&A

2025-10-08

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60830

EUVD

EUVD-2025-33166

Affected Vendors & Products

Vendor	Product	Version / Range
redragon-erp	redragon-erp	1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This vulnerability in redragon-erp v1.0 is a Shiro deserialization vulnerability caused by the use of the default Shiro key. This means that the application improperly handles serialized data, allowing an attacker to potentially execute arbitrary code or manipulate the application by exploiting the default cryptographic key used in Shiro.

Impact Analysis

Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain unauthorized access, or manipulate the application, potentially leading to data breaches, system compromise, or disruption of services.

Hi! I’m here to help you understand CVE-2025-60830. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70