PT-2025-31828 · Unknown · Givanz Vvveb

Andyp138 · Published 2025-08-04 · Updated 2025-08-04 · CVE-2025-8517

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions givanz Vvveb version 1.0.6.1

Description A vulnerability exists in givanz Vvveb that allows for session fixation. The attack can be launched remotely and the exploit has been publicly disclosed.

Recommendations Upgrade to version 1.0.7 to address this issue.

Exploit

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2025-8517

Affected Products

Givanz Vvveb

References · 14

• 🔥 https://github.com/givanz/Vvveb/issues/312 · Exploit
• 🔥 https://github.com/helloandrewpaul/Session-Fixation-in-Vvveb-CMS-v1.0.6.1 · Exploit
• 🔥 https://github.com/kwerty138/Session-Fixation-in-Vvveb-CMS-v1.0.6.1 · Exploit
• https://github.com/givanz/Vvveb/releases/tag/1.0.7 · Patch
• https://github.com/givanz/Vvveb/commit/d4b1e030066417b77d15b4ac505eed5ae7bf2c5e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-8517 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8517 · Vendor Advisory
• https://github.com/givanz/Vvveb/issues/312#issuecomment-2977995664 · Note
• https://vuldb.com/?id.318643 · Note
• https://vuldb.com/?submit.623135 · Note
• https://vuldb.com/?ctiid.318643 · Note
• https://twitter.com/VulmonFeeds/status/1952420622895591854 · Twitter Post
• https://t.me/CVEtracker/29094 · Telegram Post
• https://twitter.com/CVEnew/status/1952404828556349442 · Twitter Post