Description
A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release."
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.325964
Permissions Required, VDB Entry signature
permissions-required
https://vuldb.com/?ctiid.325964
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.657181
Scores
CVSS v3
3.5
EPSS
0.0034
EPSS Percentile
25.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-200
CWE-284
Status
published
Products (1)
vvveb/vvveb
< 1.0.7.2
Published
Sep 26, 2025
Tracked Since
Feb 18, 2026