CVE-2025-8519

Katalog CVE

CVSS 2.7 · Low EPSS 0,42%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada vvveb. Skor CVSS 3.1 2.7 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability classified as problematic has been found in givanz Vvveb up to 1.0.5. This affects an unknown part of the file /vadmin123/index.php?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The identifier of the patch is f684f3e374d04db715730fc4796e102f5ebcacb2. It is recommended to upgrade the affected component.

Rincian

Terbit di NVD

4 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

2.7 (Low), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-284: Improper Access Control

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/givanz/Vvveb/commit/f684f3e374d04db715730fc4796e102f5ebcacb2 patch
• https://hkohi.ca/vulnerability/10 exploit · advisory pihak ketiga
• https://vuldb.com/?id.318645 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.624972 advisory pihak ketiga · vdb entry
• https://github.com/givanz/Vvveb/releases/tag/1.0.6 release notes
• https://vuldb.com/?ctiid.318645 permissions required · vdb entry