CVE-2025-11028: givanz Vvveb Image information disclosure
A security flaw has been discovered in givanz Vvveb up to 1.0.7.2. This affects an unknown part of the component Image Handler. Performing manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11028?
CVE-2025-11028 has a critical severity rating due to its potential for information disclosure.
How do I fix CVE-2025-11028?
To mitigate CVE-2025-11028, upgrade to a version of givanz Vvveb that is higher than 1.0.7.2.
What components are affected by CVE-2025-11028?
CVE-2025-11028 specifically affects the Image Handler component of givanz Vvveb.
Can CVE-2025-11028 be exploited remotely?
Yes, CVE-2025-11028 can be exploited remotely, allowing attackers to disclose sensitive information.
Is there existing exploit code for CVE-2025-11028?
Yes, the exploit for CVE-2025-11028 has been publicly released, increasing its risk of exploitation.