A vulnerability was found in Cista up to 0.15. It has been rated as problematic. This vulnerability affects the function cista::raw of the component Untrusted Page Handler. This manipulation of the argument deserialized causes deserialization.

The identification of this vulnerability is CVE-2025-60887. It is possible to initiate the attack remotely. There is no exploit available.