CVE-2025-8548mediumCWE-200CWE-209

CVE-2025-8548: fallo de gravedad media en atjiu pybbs

atjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposure

Publicada el

Seguir esta CVE+ Monitorear pybbs

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.3epss 0.6%
A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function sendEmailCode of the file src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java of the component Registered Email Handler. The manipulation of the argument email leads to information exposure through error message. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 234197c4f8fc7ce24bdcff5430cd42492f28936a. It is recommended to apply a patch to fix this issue.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
atjiu · pybbs
CVEs relacionadas — atjiu pybbs

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-8550MEDIUMatjiu pybbs list cross site scriptingEPSS 0.7%CVE-2025-8546MEDIUMatjiu pybbs Verification Code login CaptchaEPSS 0.5%CVE-2025-8549MEDIUMatjiu pybbs UserAdminController.java update weak passwordEPSS 0.5%CVE-2025-8547MEDIUMatjiu pybbs Email Verification improper authorizationEPSS 0.5%CVE-2025-8814MEDIUMatjiu pybbs CookieUtil.java setCookie cross-site request forgeryEPSS 0.4%CVE-2025-8812MEDIUMatjiu pybbs Admin Panel settings cross site scriptingEPSS 0.4%