PT-2025-27142 · Diyhi Bbs · Diyhi Bbs

Shenxiusecurity · Published 2025-06-27 · Updated 2025-09-02 · CVE-2025-6762

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: diyhi bbs versions up to 6.8

Description: A critical issue has been discovered that affects the getUrl function of the /admin/login file in the HTTP Header Handler component. The manipulation of the Host argument leads to server-side request forgery, which can be initiated remotely.

Recommendations: For versions up to 6.8, consider restricting access to the /admin/login endpoint until a patch is available. As a temporary workaround, consider disabling the getUrl function of the HTTP Header Handler component to minimize the risk of exploitation. Avoid using the Host argument in the affected HTTP Header Handler component until the issue is resolved.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-6762

Affected Products

Diyhi Bbs

References · 10

• 🔥 https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-02.md#steps-to-reproduce · Exploit
• 🔥 https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-02.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6762 · Security Note
• https://osv.dev/vulnerability/CVE-2025-6762 · Vendor Advisory
• https://vuldb.com/?id.314073 · Note
• https://twitter.com/CVEnew/status/1938563251366740013 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1938579335658500150 · Twitter Post
• https://t.me/cveNotify/134119 · Telegram Post
• https://vuldb.com/?ctiid.314073 · Note
• https://vuldb.com/?submit.598896 · Note