Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
High · 7.6
CVE-2025-29459
EUVD-2025-11803GHSA-2qhw-4vw3-x335
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Supplier disputes this be…
Published Apr 17, 2025 · Updated Apr 23, 2025 · Assigned by mitre