PT-2025-31905 · Unknown · Atjiu Pybbs

Zast.Ai · Published 2025-08-05 · Updated 2025-08-05 · CVE-2025-8547

Positive Technologies (AI Summary)

CVSS v4.0

5.5

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions atjiu pybbs versions up to 6.0.0

Description A critical issue exists in the Email Verification Handler component, leading to improper authorization. The attack can be initiated remotely, and the exploit has been publicly disclosed.

Recommendations Apply patch 044f22893bee254dc2bb0d30f614913fab3c22c2 to resolve the issue.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2025-8547

Affected Products

Atjiu Pybbs

References · 12

• 🔥 https://github.com/atjiu/pybbs/issues/200#issue-3256283647 · Exploit
• 🔥 https://github.com/atjiu/pybbs/issues/200 · Exploit
• https://github.com/atjiu/pybbs/commit/044f22893bee254dc2bb0d30f614913fab3c22c2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-8547 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8547 · Vendor Advisory
• https://github.com/atjiu/pybbs/issues/200#issuecomment-3134710486 · Note
• https://t.me/cveNotify/130875 · Telegram Post
• https://vuldb.com/?submit.622180 · Note
• https://vuldb.com/?ctiid.318676 · Note
• https://vuldb.com/?id.318676 · Note
• https://twitter.com/CVEnew/status/1952617294292566434 · Twitter Post
• https://t.me/CVEtracker/29181 · Telegram Post