CNNVD-202508-314 Information

CNNVD ID

CNNVD-202508-314

CVE-2025-8549

  • CNNVD Published: 2025-08-05

Description (Chinese)

pybbs是iuiu个人开发者的一个Java开发的社区平台。 pybbs 6.0.0及之前版本存在安全漏洞,该漏洞源于文件src/main/java/co/yiiu/pybbs/controller/admin/UserAdminController.java中函数update存在弱密码要求问题。

Description (English)

Pybbs is a community platform developed by Java, an iuiu personal developer. There is a security loophole in the pybbs 6.0.0 and previous versions, which stems from the weakness of password requirements in the document src/main/java/co/yiiu/pybbs/controller/admin/UserAdminController.java.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-05

Last Modified

2026-02-24

References

https://github.com/atjiu/pybbs/commit/d09cb19a8e7d7e5151282926ada54080244d499f https://github.com/atjiu/pybbs/issues/201 https://github.com/atjiu/pybbs/issues/201#issuecomment-3134733216 https://vuldb.com/?ctiid.318678 https://vuldb.com/?id.318678 https://vuldb.com/?submit.622187 https://github.com/atjiu/pybbs/issues/201#issue-3256288016

Share on: