VulnerabilityAnalyzed
CVE-2025-8814
A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic.
LOW 2.1EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 8aa2bb1aef3346e49aec6358edf5e47ce905ae7b. It is recommended to apply a patch to fix this issue.
- CVSS 4.0
- 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.34% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352, CWE-862
- Affected
- pybbs project/pybbs
- Source
- cna@vuldb.com
References
- https://github.com/atjiu/pybbs/commit/8aa2bb1aef3346e49aec6358edf5e47ce905ae7bPatch
- https://github.com/atjiu/pybbs/issues/211Exploit, Issue Tracking
- https://github.com/atjiu/pybbs/issues/211#issue-3256483043Exploit, Issue Tracking
- https://github.com/atjiu/pybbs/issues/211#issuecomment-3134960777Issue Tracking
- https://vuldb.com/?ctiid.319343Permissions Required, VDB Entry
- https://vuldb.com/?id.319343Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.622334Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.622353Third Party Advisory, VDB Entry
- https://github.com/atjiu/pybbs/issues/211Exploit, Issue Tracking
- https://github.com/atjiu/pybbs/issues/211#issue-3256483043Exploit, Issue Tracking
- https://github.com/atjiu/pybbs/issues/211#issuecomment-3134960777Issue Tracking
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.