CNNVD-202508-876 Information
CNNVD ID
CNNVD-202508-876
Related CVE
- CNNVD Published: 2025-08-10
Description (Chinese)
pybbs是iuiu个人开发者的一个Java开发的社区平台。 pybbs 6.0.0及之前版本存在安全漏洞，该漏洞源于文件src/main/java/co/yiiu/pybbs/util/CookieUtil.java中函数setCookie导致跨站请求伪造，可能导致远程攻击。
Description (English)
Pybbs is a community platform developed by Java, an iuiu personal developer. There is a security loophole in the pybbs 6.0.0 and earlier versions, which stems from the fact that the central function of src/main/java/co/yiiu/pybbs/util/CookieUtil.java leads to cross-site requests for forgery, which may lead to a remote attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-08-10
Last Modified
2026-02-24
References
https://github.com/atjiu/pybbs/commit/8aa2bb1aef3346e49aec6358edf5e47ce905ae7b https://github.com/atjiu/pybbs/issues/211#issuecomment-3134960777 https://github.com/atjiu/pybbs/issues/211#issue-3256483043 https://vuldb.com/?submit.622353 https://vuldb.com/?submit.622334 https://vuldb.com/?id.319343 https://vuldb.com/?ctiid.319343 https://access.redhat.com/security/cve/cve-2025-8814 https://nvd.nist.gov/vuln/detail/CVE-2025-8814
Share on: