CNNVD-202508-874 Information

Aug 10, 2025 cve

CNNVD ID

CNNVD-202508-874

CVE-2025-8812

CNNVD Published: 2025-08-10

Description (Chinese)

pybbs是iuiu个人开发者的一个Java开发的社区平台。 pybbs 6.0.0及之前版本存在代码注入漏洞，该漏洞源于文件/api/settings中导致跨站脚本，可能导致远程攻击。

Description (English)

Pybbs is a community platform developed by Java, an iuiu personal developer. The pybbs 6.0.0 and previous versions had a code injection loophole, which originated in the document/api/settings and led to a cross-site script, which could lead to a remote attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

个人开发者

Published

2025-08-10

Last Modified

2026-02-24

References

https://github.com/atjiu/pybbs/issues/209 https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22 https://vuldb.com/?ctiid.319341 https://github.com/atjiu/pybbs/issues/209#issuecomment-3134772651 https://vuldb.com/?id.319341 https://vuldb.com/?submit.622331 https://access.redhat.com/security/cve/cve-2025-8812 https://nvd.nist.gov/vuln/detail/CVE-2025-8812

Share on: