bbs vulnerabilities

2 known vulnerabilities in bbs from Diyhi. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  bbs: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-9461Aug 26, 2025Diyhi

  A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePackageManageAction.java of the component File Compression Handler. This manipulation of the argument id

• 7.2 High severity

  bbs: Server-Side Request Forgery

  CVE-2025-6762Jun 27, 2025Diyhi

  A vulnerability classified as critical has been found in diyhi bbs up to 6.8. This affects the function getUrl of the file /admin/login of the component HTTP Header Handler. The manipulation of the argument Host leads to server-side request forgery. It is poss