| タイトル | atjiu https://github.com/atjiu/pybbs <=6.0.0 Registration email is not verified |
|---|
| 説明 | In the latest v6.0.0 version, there is a logic vulnerability in the registration function. Users can use the corresponding features without immediate email verification during registration. Email verification is only required later when uploading an avatar. This allows attackers to impersonate various email owners without restriction and register accounts in bulk |
|---|
| ソース | ⚠️ https://github.com/atjiu/pybbs/issues/200 |
|---|
| ユーザー | ZAST.AI (UID 87884) |
|---|
| 送信 | 2025年07月25日 03:30 (1 年 ago) |
|---|
| モデレーション | 2025年08月04日 15:05 (10 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 318676 [atjiu pybbs 迄 6.0.0 Email Verification 特権昇格] |
|---|
| ポイント | 18 |
|---|