Information Disclosure Vulnerability in MyBB by MyBB Group
CVE-2025-29457

7.6HIGH

Key Information:

Vendor

MyBB Group

Status
MyBB
Vendor
CVE Published:
17 April 2025

What is CVE-2025-29457?

A vulnerability found in MyBB version 1.8.38 permits remote attackers to exploit the Import a Theme function, potentially exposing sensitive information. This issue could lead to unauthorized access to critical data, highlighting the importance of prompt security measures in safeguarding user information.

References

https://www.yuque.com/morysummer/vx41bz/vro4dvxzuiwlg6uv
https://docs.mybb.com/1.8/administration/security/protect...

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.