VULNERABILITY INTELLIGENCE

CVE-2025-8517

CVSS score6.3 MEDIUM

EPSS probability2.34%

CISA KEVNot currently listed

Published2025-08-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability was detected in givanz Vvveb 1.0.6.1. Impacted is an unknown function. The manipulation results in session fixiation. The attack can be launched remotely. The exploit is now public and may be used. Upgrading to version 1.0.7 is recommended to address this issue. The patch is identified as d4b1e030066417b77d15b4ac505eed5ae7bf2c5e. You should upgrade the affected component.

Weakness classification

cna@vuldb.com: CWE-384

Primary references

cna@vuldb.com — Patch
cna@vuldb.com — Exploit, Issue Tracking, Mitigation
cna@vuldb.com — Issue Tracking
cna@vuldb.com — Release Notes
cna@vuldb.com — Exploit, Mitigation
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Mitigation
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Mitigation