CVE-2025-8519 givanz Vvveb Drag-and-Drop Editor editor information disclosure
Remote attackers can exploit the Drag-and-Drop Editor to disclose sensitive information via the url argument.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-8519?
CVE-2025-8519 is a medium-severity vulnerability in givanz Vvveb, published on 4 Aug 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability classified as problematic has been found in givanz Vvveb up to 1.0.5. This affects an unknown part of the file /vadmin123/index.php?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The identifier of the patch is f684f3e374d04db715730fc4796e102f5ebcacb2. It is recommended to upgrade the affected component.
Which versions are affected by CVE-2025-8519?
It affects 1 product.
Products include Vvveb Vvveb.
How do I fix CVE-2025-8519?
No fix has been published for CVE-2025-8519 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-8519 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-8519 exists.
Other vulnerabilities in givanz Vvveb
Sources
Also known as GHSA-8gqq-pm8m-h5f6.