| عنوان | atjiu https://github.com/atjiu/pybbs <=6.0.0 Registration email is not verified |
|---|
| الوصف | In the latest v6.0.0 version, there is a logic vulnerability in the registration function. Users can use the corresponding features without immediate email verification during registration. Email verification is only required later when uploading an avatar. This allows attackers to impersonate various email owners without restriction and register accounts in bulk |
|---|
| المصدر | ⚠️ https://github.com/atjiu/pybbs/issues/200 |
|---|
| المستخدم | ZAST.AI (UID 87884) |
|---|
| ارسال | 25/07/2025 03:30 AM (1 سنة منذ) |
|---|
| الاعتدال | 04/08/2025 03:05 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 318676 [atjiu pybbs حتى 6.0.0 Email Verification تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|