| 제목 | atjiu https://github.com/atjiu/pybbs <=6.0.0 Registration email is not verified |
|---|
| 설명 | In the latest v6.0.0 version, there is a logic vulnerability in the registration function. Users can use the corresponding features without immediate email verification during registration. Email verification is only required later when uploading an avatar. This allows attackers to impersonate various email owners without restriction and register accounts in bulk |
|---|
| 원천 | ⚠️ https://github.com/atjiu/pybbs/issues/200 |
|---|
| 사용자 | ZAST.AI (UID 87884) |
|---|
| 제출 | 2025. 07. 25. AM 03:30 (11 개월 ago) |
|---|
| 모더레이션 | 2025. 08. 04. PM 03:05 (10 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 318676 [atjiu pybbs 까지 6.0.0 Email Verification 권한 상승] |
|---|
| 포인트들 | 18 |
|---|