PT-2025-43861 · Unknown · Givanz Vvveb

Huu1J · Published 2025-10-27 · Updated 2025-11-07 · CVE-2025-12203

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions givanz Vvveb versions up to 1.0.7.3

Description A weakness exists in givanz Vvveb related to path traversal. This issue affects the sanitizeFileName function within the system/functions.php file of the Code Editor component. Manipulation of the File argument can lead to unauthorized access. The attack can be initiated remotely, and an exploit is publicly available.

Recommendations Apply the patch b0fa7ff74a3539c6d37000db152caad572e4c39b to resolve this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-12203

Affected Products

Givanz Vvveb

References · 11

• 🔥 https://github.com/givanz/Vvveb/issues/333 · Exploit
• https://github.com/givanz/Vvveb/commit/b0fa7ff74a3539c6d37000db152caad572e4c39b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-12203 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12203 · Vendor Advisory
• https://vuldb.com/?ctiid.329873 · Note
• https://vuldb.com/?id.329873 · Note
• https://t.me/cveNotify/140374 · Telegram Post
• https://vuldb.com/?submit.673159 · Note
• https://t.me/cveNotify/142049 · Telegram Post
• https://github.com/givanz/Vvveb · Note
• https://t.me/CVEtracker/35774 · Telegram Post