PT-2025-44037 · Pilos+2 · Pilos+2

CVE-2025-62524

·

Publicado

2025-10-27

·

Atualizado

2025-11-04

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions PILOS versions prior to 4.8.0
Description PILOS, a frontend for BigBlueButton, reveals the PHP version through the X-Powered-By header. This information disclosure allows attackers to fingerprint the server and identify potential exploits. The PHP version can also be determined by examining the PILOS version displayed in the footer and reviewing the source code on GitHub. This issue stems from the base PHP image used.
Recommendations Update to PILOS version 4.8.0 or later.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-497CWE-200

Identificadores relacionados

CVE-2025-62524
GHSA-Q93H-5J6H-J22X

Produtos afetados

Bigbluebutton
Php
Pilos