Prisna Social Counter versions up to 2.0.5 are affected by a deserialization of untrusted data vulnerability (CVE-2025-46473) that permits object injection attacks. This vulnerability arises when the application processes serialized data from untrusted sources without proper validation or sanitization, potentially allowing an attacker with high privileges to execute arbitrary code or manipulate application state. The CVSS v3.1 score is 7.2, indicating a high impact with network attack vector, low attack complexity, required high privileges, no user interaction, and full confidentiality, integrity, and availability impact.

Successful exploitation of this vulnerability could lead to full compromise of the affected system, including unauthorized code execution and data manipulation. The attacker must have high privileges to exploit the vulnerability, but once exploited, the impact on confidentiality, integrity, and availability is high. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users only and monitor for unusual activity. Avoid processing untrusted serialized data where possible.