PT-2025-31906 · Unknown · Atjiu Pybbs

Zast.Ai · Published 2025-08-05 · Updated 2025-08-05 · CVE-2025-8548

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions atjiu pybbs versions prior to 6.0.0

Description A problematic issue exists in the Registered Email Handler component of atjiu pybbs. This issue affects the sendEmailCode function within the src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java file. Manipulation of the email argument can lead to information exposure through an error message. The attack can be initiated remotely and is considered complex to exploit. The exploit has been publicly disclosed and may be used.

Recommendations Apply a patch with identifier 234197c4f8fc7ce24bdcff5430cd42492f28936a to resolve this issue.

Exploit

Fix

Generation of Error Message Containing Sensitive Information

Information Disclosure

Weakness Enumeration

CWE-209

CWE-200

Related Identifiers

CVE-2025-8548

Affected Products

Atjiu Pybbs

References · 12

• 🔥 https://github.com/atjiu/pybbs/issues/202#issuecomment-3134602615 · Exploit
• 🔥 https://github.com/atjiu/pybbs/issues/202#issue-3256293499 · Exploit
• 🔥 https://github.com/atjiu/pybbs/issues/202 · Exploit
• https://github.com/atjiu/pybbs/commit/234197c4f8fc7ce24bdcff5430cd42492f28936a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-8548 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8548 · Vendor Advisory
• https://vuldb.com/?id.318677 · Note
• https://vuldb.com/?submit.622186 · Note
• https://twitter.com/CVEnew/status/1952617292358905913 · Twitter Post
• https://vuldb.com/?ctiid.318677 · Note
• https://t.me/CVEtracker/29185 · Telegram Post
• https://t.me/cveNotify/130879 · Telegram Post