CVE-2025-8517

216.73.217.172

· Published 04/08/2025 16:15 · Modified 05/08/2025 14:34

Labels: CVE-2025-8517 2025-08-04 CVE-2025-8517 CWE-384 [email protected]

Essential information

Published: 04/08/2025 16:15
Modified: 05/08/2025 14:34
Author: —
Creator: —
CVSS: 5.3 MEDIUM (v3) 5.3 MEDIUM (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

A vulnerability was found in givanz Vvveb 1.0.6.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.7 is able to address this issue. The patch is named d4b1e030066417b77d15b4ac505eed5ae7bf2c5e. It is recommended to upgrade the affected component.

NVD status

Status: Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
givanz / vvveb	`cpe:2.3:a:givanz:vvveb:1.0.6.1:::::::*`
givanz / vvveb	`cpe:2.3:a:givanz:vvveb:1.0.7:::::::*`