CVE-2025-29457

CVSS 3.1 Score 7.6 of 10 (high)

Details

Published Apr 17, 2025

Updated: Apr 24, 2025

CWE ID 918

Summary

CVE-2025-29457 is a vulnerability affecting MyBB 1.8.38. It allows a remote attacker to access sensitive information through the Import a Theme function. While the supplier contests this issue due to administrative privileges and SSRF mitigation, the vulnerability poses a potential risk, underscoring the importance of keeping software up-to-date to protect against potential data exposures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

MyBB

Affected Vendors

myBB

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/4OMS35
https://www.cve.org/CVERecord?id=CVE-2025-29457
https://nvd.nist.gov/vuln/detail/CVE-2025-29457

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Threats to the 2025 NATO Summit

Artificial Eyes: Generative AI in China’s Military Intelligence

GrayAlpha Uses Diverse Infection Vectors to Deploy PowerNet Loader and NetSupport RAT

Know What Matters

For Customers

For Partners