PT-2025-53923 · Aizuda · Snail-Job

Icqv61 · Published 2025-12-30 · Updated 2025-12-30 · CVE-2025-15246

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aizuda snail-job versions up to 1.7.0

Description A flaw exists in the FurySerializer.deserialize function within the API component of aizuda snail-job. This issue involves the deserialization of the argsStr argument, potentially allowing for remote exploitation. The details of the exploit have been publicly disclosed.

Recommendations Versions prior to 1.7.0 should be updated.

Exploit

Fix

Deserialization of Untrusted Data

RCE

Weakness Enumeration

CWE-502

CWE-20

Related Identifiers

CVE-2025-15246

Affected Products

Snail-Job

References · 7

• 🔥 https://gitee.com/aizuda/snail-job/issues/ICQV61 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15246 · Security Note
• https://vuldb.com/?ctiid.338636 · Note
• https://vuldb.com/?id.338636 · Note
• https://twitter.com/CVEnew/status/2005970070774661493 · Twitter Post
• https://t.me/cveNotify/147133 · Telegram Post
• https://gitee.com/aizuda/snail-job · Note