Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
High · 7.6
CVE-2025-29457
EUVD-2025-11804GHSA-27ww-388c-hfhf
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disput…
Published Apr 17, 2025 · Updated Apr 23, 2025 · Assigned by mitre