CVE-2025-8814

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-8814
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8814.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-8814
Published
2025-08-10T15:02:06Z
Modified
2026-08-27T10:10:41Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
atjiu pybbs CookieUtil.java setCookie cross-site request forgery
Details

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 8aa2bb1aef3346e49aec6358edf5e47ce905ae7b. It is recommended to apply a patch to fix this issue.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-352",
        "CWE-862"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8814.json"
}
References

Affected packages

Git / github.com/atjiu/pybbs

Affected ranges

Type
GIT
Repo
https://github.com/atjiu/pybbs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8aa2bb1aef3346e49aec6358edf5e47ce905ae7b
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:pybbs_project:pybbs:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0.0"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

6.*
6.0
jfinalbbs2.*
jfinalbbs2.0
jfinalbbs2.1
jfinalbbs2.2
pybbs-4.*
pybbs-4.0-beta
pybbs2.*
pybbs2.5
pybbs2.5-lastest
pybbs2.6
pybbs4.*
pybbs4.0-release
v5.*
v5.0
v5.1.0
v5.2.0
v5.2.1
v6.*
v6.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8814.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "54778663255410175865710915985528833099",
                "246850397200083129007515945639881035274",
                "257045295922290879603286578307892375924",
                "242315637112820493474065529581861954434",
                "21819393636797736260903803583409925942",
                "56650693686854128378291779501997825636",
                "177878797399099740426293424377889949458",
                "292380972179101498799059318599704204734",
                "173838853213152679177489444189256611030",
                "220706165973495295742081993593463343510",
                "307221977552056709993595615359239896951",
                "234167759273437227264442515753285687736",
                "55722828902052950267750773799722549931",
                "41333648893348547856406529132414627777",
                "305054173686887947493160243714163902292",
                "29215814973230442621460271132035782466",
                "202224466699764863847539386570866854413",
                "339093609334624048436009968557924516738"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-8814-43c77e15",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/atjiu/pybbs/commit/8aa2bb1aef3346e49aec6358edf5e47ce905ae7b",
        "target": {
            "file": "src/main/java/co/yiiu/pybbs/util/CookieUtil.java"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "86382516641963618566714753968655958596",
            "length": 517
        },
        "id": "CVE-2025-8814-b0dccd9c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/atjiu/pybbs/commit/8aa2bb1aef3346e49aec6358edf5e47ce905ae7b",
        "target": {
            "file": "src/main/java/co/yiiu/pybbs/util/CookieUtil.java",
            "function": "setCookie"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "251926980905587283153339497344052888081",
            "length": 396
        },
        "id": "CVE-2025-8814-ecbb255c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/atjiu/pybbs/commit/8aa2bb1aef3346e49aec6358edf5e47ce905ae7b",
        "target": {
            "file": "src/main/java/co/yiiu/pybbs/util/CookieUtil.java",
            "function": "clearCookie"
        }
    }
]
vanir_signatures_modified 
"2026-08-27T10:10:41Z"