Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

DesignThemes Insurance <= 3.5 allows Object Injection via Deserialization

CVE-2025-31634 · published 1 year ago
Summary

A security issue in DesignThemes Insurance software versions 3.5 and earlier allows an attacker to execute malicious code by exploiting a deserialization vulnerability. This could potentially lead to unauthorized actions within the system. Update to version 4.0 or later to mitigate the risk.

Original advisory text
Deserialization of Untrusted Data vulnerability in designthemes Insurance insurance allows Object Injection.This issue affects Insurance: from n/a through <= 3.5.
Deserialization of Untrusted Data vulnerability in designthemes Insurance insurance allows Object Injection.This issue affects Insurance: from n/a through <= 3.5.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published22 Oct 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-31634 · NVD
Track software like this
Free during beta