PT-2025-34733 · Diyhi Bbs · Diyhi Bbs

Yu Bao

·

CVE-2025-9461

·

Publicado

2025-08-26

·

Atualizado

2025-09-03

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: diyhi bbs versions prior to 6.9
Description: A weakness has been identified that may lead to information disclosure. This issue is related to the manipulation of the idGroup argument within an unknown function of the file src/main/java/cms/web/action/filePackage/FilePackageManageAction.java of the File Compression Handler component. Remote exploitation is possible. The exploit has been made publicly available.
Recommendations: Update diyhi bbs to version 6.9 or later.

Exploit

Correção

Improper Access Control

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284CWE-200

Identificadores relacionados

CVE-2025-9461

Produtos afetados

Diyhi Bbs