CVE-2025-8227 | yanyutao0402 ChanCMS up to 3.1.2 /collect/getArticle taskUrl deserialization (ICLP81)

A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /collect/getArticle. The manipulation of the argument taskUrl leads to deserialization.

This vulnerability is known as CVE-2025-8227. The attack can be launched remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.