High severity7.6NVD Advisory· Published Apr 17, 2025· Updated Jun 17, 2026
CVE-2025-29457
CVE-2025-29457
Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- www.yuque.com/morysummer/vx41bz/vro4dvxzuiwlg6uvnvdExploitThird Party Advisory
- docs.mybb.com/1.8/administration/security/protection/nvdMitigationProduct
News mentions
0No linked articles in our index yet.