CVE-2025-6453

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-6453

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6453.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-6453

Published

2025-06-22T02:31:05.226Z

Modified

2026-07-08T07:32:10.500058869Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

diyhi bbs API ForumManageAction.java add path traversal

Details

A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumManageAction.java of the component API. The manipulation of the argument dirName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6453.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-22"
    ],
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "6.8"
                },
                {
                    "last_affected": "6.8"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/diyhi/bbs

Affected ranges

Type

GIT

Repo

https://github.com/diyhi/bbs

Events

Introduced

2d4ce4e8560622a066845654d3be8e6568f17f18

Last affected

2d4ce4e8560622a066845654d3be8e6568f17f18

Database specific

{
    "cpe": "cpe:2.3:a:diyhi:bbs:6.8:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "6.8"
        },
        {
            "last_affected": "6.8"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

6.*

6.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6453.json"