PT-2025-31841 · Unknown · Givanz Vvveb

0Xhamy · Published 2025-08-04 · Updated 2025-08-04 · CVE-2025-8519

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions givanz Vvveb versions up to 1.0.5

Description A problematic issue exists in givanz Vvveb that allows information disclosure. The issue is located in an unknown part of the file /vadmin123/index.php?module=editor/editor within the Drag-and-Drop Editor component. The url argument can be manipulated to trigger the issue, and the attack can be initiated remotely. The exploit has been publicly disclosed.

Recommendations Upgrade to version 1.0.6.

Exploit

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

CVE-2025-8519

Affected Products

Givanz Vvveb

References · 11

• 🔥 https://vuldb.com/?submit.624972 · Exploit
• 🔥 https://hkohi.ca/vulnerability/10 · Exploit
• https://github.com/givanz/Vvveb/commit/f684f3e374d04db715730fc4796e102f5ebcacb2 · Patch
• https://github.com/givanz/Vvveb/releases/tag/1.0.6 · Patch
• https://osv.dev/vulnerability/CVE-2025-8519 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8519 · Security Note
• https://t.me/CVEtracker/29113 · Telegram Post
• https://vuldb.com/?ctiid.318645 · Note
• https://twitter.com/CVEnew/status/1952426693659918628 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1952489739447148981 · Twitter Post
• https://vuldb.com/?id.318645 · Note