A vulnerability was found in Cista up to 0.15. It has been rated as problematic. This vulnerability affects the function
cista::raw of the component Untrusted Page Handler. This manipulation of the argument deserialized causes deserialization.
The identification of this vulnerability is CVE-2025-60887. It is possible to initiate the attack remotely. There is no exploit available.