CVE-2025-29460

CVSS 3.1 Score 7.6 of 10 (high)

Details

Published Apr 17, 2025

Updated: Apr 25, 2025

CWE ID 918

Summary

CVE-2025-29460 is a vulnerability affecting MyBB 1.8.38 that permits a remote attacker to extract sensitive data through the Add Mycode function. Despite the vendor's disagreement, this issue grants unauthorized access to confidential information due to insufficient input validation and potential Server Side Request Forgery (SSRF) attacks. This vulnerability poses a significant risk to affected installations and necessitates immediate patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

MyBB

Affected Vendors

myBB

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/4OMZUJ
https://www.cve.org/CVERecord?id=CVE-2025-29460
https://nvd.nist.gov/vuln/detail/CVE-2025-29460

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Threats to the 2025 NATO Summit

Artificial Eyes: Generative AI in China’s Military Intelligence

Know What Matters

For Customers

For Partners