CVE-2025-8813

Katalog CVE

CVSS 6.1 · Medium EPSS 0,32%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada pybbs project pybbs. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as problematic. This vulnerability affects the function changeLanguage of the file src/main/java/co/yiiu/pybbs/controller/front/IndexController.java. The manipulation of the argument referer leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as edb14ff13e9e05394960ba46c3d31d844ff2deac. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

10 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/atjiu/pybbs/commit/edb14ff13e9e05394960ba46c3d31d844ff2deac patch
• https://vuldb.com/?id.319342 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.622333 advisory pihak ketiga · vdb entry
• https://github.com/atjiu/pybbs/issues/210 exploit · issue tracking
• https://github.com/atjiu/pybbs/issues/210#issue-3256474679 exploit · issue tracking
• https://github.com/atjiu/pybbs/issues/210#issuecomment-3134906856 issue tracking
• https://vuldb.com/?ctiid.319342 permissions required · vdb entry