Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
High · 7.6
CVE-2025-29458
EUVD-2025-11802GHSA-3996-4m5r-mmwf
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function. NOTE: the Supplier dispute…
Published Apr 17, 2025 · Updated Apr 23, 2025 · Assigned by mitre