This vulnerability affects the ZipSecureFile.setMinflateRatio function within the DocToHtmlUtils.java file of Sanluan PublicCMS versions up to 6.202506.d. An attacker can remotely manipulate this function to cause excessive resource consumption, potentially impacting system availability. The CVSS 4.0 base score is 5.3, indicating medium severity. No vendor advisory or patch information is available, and the vendor has not responded to disclosure attempts.

Successful exploitation leads to resource consumption, which may degrade system performance or availability. There is no indication of privilege escalation, data disclosure, or code execution. The attack requires no user interaction and can be performed remotely, increasing the risk of denial-of-service conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider implementing network-level protections such as limiting access to the affected service and monitoring for unusual resource usage patterns related to the vulnerable function. Avoid exposing the affected versions to untrusted networks until a fix is available.