CVE-2025-6453

A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumManageAction.java of the component API. The manipulation of the argument dirName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-22

• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-01.mdExploit
• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-01.md#steps-to-reproduceExploit
• https://vuldb.com/?ctiid.313560Permissions Required, VDB Entry
• https://vuldb.com/?id.313560Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.598862Third Party Advisory, VDB Entry
• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-01.mdExploit

Published

Jun 22, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-64524cups-filters contains backends, filters, and other software …5.5
• CVE-2025-64525Astro is a web framework. In Astro versions 2.16.0 up to but…6.5
• CVE-2025-64526Strapi is an open source headless content management system.…5.3
• CVE-2025-64527Envoy is a high-performance edge/middle/service proxy. In 1.…6.5
• CVE-2025-64528Discourse is an open source discussion platform. Prior to ve…5.3
• CVE-2025-64529SpiceDB is an open source database system for creating and m…6.5
• CVE-2025-64530Apollo Federation is an architecture for declaratively compo…7.5
• CVE-2025-64531Substance3D - Stager versions 3.1.5 and earlier are affected…7.8
• CVE-2025-64537Adobe Experience Manager versions 6.5.23 and earlier are aff…9.3
• CVE-2025-64538Adobe Experience Manager versions 6.5.23 and earlier are aff…9.3
• CVE-2025-64539Adobe Experience Manager versions 6.5.23 and earlier are aff…9.3
• CVE-2025-6454An issue has been discovered in GitLab CE/EE affecting all v…8.8