CVE-2025-8552
BaseFortify
Publication date: 2025-08-05
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| pybbs_project | pybbs | to 6.0.0 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-94 | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. |
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-8552 is a reflected cross-site scripting (XSS) vulnerability in the pybbs software up to version 6.0.0. It occurs in the /admin/tag/list endpoint where the 'Name' parameter is not properly encoded before being included in the web page output. This allows an attacker to inject malicious scripts that execute in the context of administrator users who view the page. Exploitation requires the attacker to be authenticated and involves some user interaction. The vulnerability impacts data integrity by allowing script injection. [1, 2, 3]
How can this vulnerability impact me? :
This vulnerability can allow attackers to execute malicious scripts in the context of administrator users, potentially leading to session hijacking, credential theft, or other malicious actions. Since the attack requires authentication and user interaction, it targets administrators who access the vulnerable endpoint. Successful exploitation compromises the integrity of the system and can lead to unauthorized actions performed with administrator privileges. [1, 3]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by testing the /admin/tag/list endpoint for reflected cross-site scripting (XSS) by injecting a payload into the 'name' parameter and observing if it is executed. For example, you can use curl or a browser to send a request like: curl 'http://<target>/admin/tag/list?name=""><svg/onload=confirm(9)>' and check if a JavaScript confirm dialog or similar script execution occurs. This confirms the presence of the XSS vulnerability. [3]
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation step is to apply the patch identified by commit 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22, which fixes the improper encoding of the 'name' parameter in /admin/tag/list. Until the patch is applied, restrict access to the vulnerable endpoint to trusted administrators only, and consider implementing web application firewall (WAF) rules to block suspicious input patterns targeting the 'name' parameter. [1]