CVE-2025-8519

LOW EPSS 30.1%

Published Aug 4, 202510mo ago · Modified Jun 17, 20261w ago

2.0 CVSS 4.0

Low

Published Aug 4, 2025 10mo ago

Last Modified Jun 17, 2026 1w ago

Description

A vulnerability classified as problematic has been found in givanz Vvveb up to 1.0.5. This affects an unknown part of the file /vadmin123/index.php?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The identifier of the patch is f684f3e374d04db715730fc4796e102f5ebcacb2. It is recommended to upgrade the affected component.

CVSS Details

Base Score

2.0

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required High

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

30.1% percentile

Exploit & Patch Status

Public Exploit Known

Patch Available

Weaknesses 2

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure

CWE-284

Affected Products 1

Vendor	Product	Version	Range
vvveb	vvveb	*	<1.0.6

References 6

github.com https://github.com/givanz/Vvveb/commit/f684f3e374d04db715730fc4796e102f5ebcacb2

Patch
github.com https://github.com/givanz/Vvveb/releases/tag/1.0.6

Release Notes
hkohi.ca https://hkohi.ca/vulnerability/10

ExploitThird Party Advisory
vuldb.com https://vuldb.com/?ctiid.318645

Permissions RequiredVDB Entry
vuldb.com https://vuldb.com/?id.318645

Third Party AdvisoryVDB Entry
vuldb.com https://vuldb.com/?submit.624972

Third Party AdvisoryVDB Entry

Remediation

github.com https://github.com/givanz/Vvveb/commit/f684f3e374d04db715730fc4796e102f5ebcacb2

Patch