CNNVD-202508-318 Information

CNNVD ID

CNNVD-202508-318

CVE-2025-8548

  • CNNVD Published: 2025-08-05

Description (Chinese)

pybbs是iuiu个人开发者的一个Java开发的社区平台。 pybbs 6.0.0及之前版本存在安全漏洞,该漏洞源于文件src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java中函数sendEmailCode存在通过错误消息泄露信息问题。

Description (English)

Pybbs is a community platform developed by Java, an iuiu personal developer. There is a security loophole in the pybbs 6.0.0 and earlier versions, which stems from the error in the document src/main/java/co/yiu/pybbs/controller/api/SettingsApiController.java ’ s sendEmailCode ’ s function.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-05

Last Modified

2026-02-24

References

https://github.com/atjiu/pybbs/commit/234197c4f8fc7ce24bdcff5430cd42492f28936a https://github.com/atjiu/pybbs/issues/202 https://github.com/atjiu/pybbs/issues/202#issuecomment-3134602615 https://vuldb.com/?ctiid.318677 https://vuldb.com/?id.318677 https://vuldb.com/?submit.622186 https://github.com/atjiu/pybbs/issues/202#issue-3256293499

Share on: