CVE-2025-8548

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function sendEmailCode of the file src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java of the component Registered Email Handler. The manipulation of the argument email leads to information exposure through error message. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 234197c4f8fc7ce24bdcff5430cd42492f28936a. It is recommended to apply a patch to fix this issue.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200 CWE-209

Affected software

Vendor	Product	Versions
atjiu	pybbs	6.0

References

https://github.com/atjiu/pybbs/commit/234197c4f8fc7ce24bdcff5430cd42492f28936aPatch
https://github.com/atjiu/pybbs/issues/202Exploit, Issue Tracking
https://github.com/atjiu/pybbs/issues/202#issue-3256293499Exploit, Issue Tracking
https://github.com/atjiu/pybbs/issues/202#issuecomment-3134602615Issue Tracking
https://vuldb.com/?ctiid.318677Permissions Required, VDB Entry
https://vuldb.com/?id.318677Third Party Advisory, VDB Entry
https://vuldb.com/?submit.622186Third Party Advisory, VDB Entry
https://github.com/atjiu/pybbs/issues/202Exploit, Issue Tracking
https://github.com/atjiu/pybbs/issues/202#issue-3256293499Exploit, Issue Tracking
https://github.com/atjiu/pybbs/issues/202#issuecomment-3134602615Issue Tracking

Timeline

Published: Aug 5, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-85493.7A vulnerability was found in atjiu pybbs up to 6.0.0. It has been classified as critical. Affected is the function update of the file src/ma CVE-2025-85505.4A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown func CVE-2025-85515.4A vulnerability was found in atjiu pybbs up to 6.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality CVE-2025-85525.4A vulnerability classified as problematic has been found in atjiu pybbs up to 6.0.0. This affects an unknown part of the file /admin/tag/lis CVE-2025-85535.4A vulnerability classified as problematic was found in atjiu pybbs up to 6.0.0. This vulnerability affects unknown code of the file /admin/s CVE-2025-85545.4A vulnerability, which was classified as problematic, has been found in atjiu pybbs up to 6.0.0. This issue affects some unknown processing CVE-2025-85555.4A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. Affected is an unknown function of the file /sea CVE-2025-85563.7A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security CVE-2025-85578.8An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attacker with access to a CVE-2025-85585.4Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated u CVE-2025-85596.5The All in One Music Player plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.1 via the 'theme'CVE-2025-85606.4The FancyTabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and includi