CVE-2025-8549

Description

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been classified as critical. Affected is the function update of the file src/main/java/co/yiiu/pybbs/controller/admin/UserAdminController.java. The manipulation leads to weak password requirements. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as d09cb19a8e7d7e5151282926ada54080244d499f. It is recommended to apply a patch to fix this issue.

References

https://vuldb.com/?submit.622187

https://vuldb.com/?id.318678

https://vuldb.com/?ctiid.318678

https://github.com/atjiu/pybbs/issues/201#issuecomment-3134733216

https://github.com/atjiu/pybbs/issues/201#issue-3256288016

https://github.com/atjiu/pybbs/issues/201

https://github.com/atjiu/pybbs/commit/d09cb19a8e7d7e5151282926ada54080244d499f

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS