VulnerabilityAnalyzed
CVE-2025-8546
A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0.
MEDIUM 5.5EPSS 0.45%
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects the function adminlogin/login of the component Verification Code Handler. The manipulation leads to guessable captcha. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The patch is named ecaf8d46944fd03e3c4ea05698f8acf0aaa570cf. It is recommended to apply a patch to fix this issue.
- CVSS 4.0
- 5.5 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287, CWE-804
- Affected
- pybbs project/pybbs
- Source
- cna@vuldb.com
References
- https://github.com/atjiu/pybbs/commit/ecaf8d46944fd03e3c4ea05698f8acf0aaa570cfPatch
- https://github.com/atjiu/pybbs/issues/199Exploit, Issue Tracking
- https://github.com/atjiu/pybbs/issues/199#issue-3256276118Exploit, Issue Tracking
- https://github.com/atjiu/pybbs/issues/199#issuecomment-3134573731Issue Tracking
- https://vuldb.com/?ctiid.318675Permissions Required, VDB Entry
- https://vuldb.com/?id.318675Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.622179Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.