High severity7.6NVD Advisory· Published Apr 17, 2025· Updated Jun 17, 2026
CVE-2025-29459
CVE-2025-29459
Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- www.yuque.com/morysummer/vx41bz/ggnmg5nnu635kvrcnvdExploitThird Party Advisory
- docs.mybb.com/1.8/administration/security/protection/nvdProduct
News mentions
0No linked articles in our index yet.