This vulnerability affects the ZipSecureFile.setMinflateRatio function within the common/src/main/java/com/publiccms/common/tools/DocToHtmlUtils.java file of Sanluan PublicCMS up to version 6.202506.d. Manipulating this function can lead to excessive resource consumption, potentially impacting system availability. The attack vector is remote network access with low attack complexity and no required privileges or user interaction. The CVSS 4.0 base score is 5.3, indicating medium severity. No vendor advisory or patch information is available, and the vendor has not responded to the disclosure.

Successful exploitation can cause resource consumption on the affected system, which may degrade performance or availability. There is no indication of privilege escalation, data confidentiality, or integrity impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider limiting exposure of the affected versions to untrusted networks and monitor for unusual resource usage related to the vulnerable function.