CyberSecBulletin

Diyhi vulnerabilities

We track 2 vulnerabilities in Diyhi products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2025.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Diyhi vulnerabilities

  • 7.5 High severity

    bbs: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2025-9461Diyhi

    A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePackageManageAction.java of the component File Compression Handler. This manipulation of the argument id

  • 7.2 High severity

    bbs: Server-Side Request Forgery

    CVE-2025-6762Diyhi

    A vulnerability classified as critical has been found in diyhi bbs up to 6.8. This affects the function getUrl of the file /admin/login of the component HTTP Header Handler. The manipulation of the argument Host leads to server-side request forgery. It is poss