CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.6. It may be remotely exploitable.
CVE
CVE-2025-29457
Severity
HIGH
CVSS
7.6
EPSS
0.42%
Original NVD Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)