CVE-2025-8517: givanz Vvveb session fixiation

Q: What is the severity of CVE-2025-8517?

CVE-2025-8517 has been declared as a critical vulnerability.

Q: What type of vulnerability is CVE-2025-8517?

CVE-2025-8517 is a session fixation vulnerability.

Q: Can CVE-2025-8517 be exploited remotely?

Yes, the exploit for CVE-2025-8517 can be launched remotely.

Q: What software is affected by CVE-2025-8517?

The vulnerability CVE-2025-8517 affects givanz Vvveb 1.0.6.1.

Q: How do I fix CVE-2025-8517?

To fix CVE-2025-8517, ensure to implement proper session management and prevent session fixation.

Published Aug 4, 2025

Updated

A vulnerability was detected in givanz Vvveb 1.0.6.1. Impacted is an unknown function. The manipulation results in session fixiation. The attack can be launched remotely. The exploit is now public and may be used. Upgrading to version 1.0.7 is recommended to address this issue. The patch is identified as d4b1e030066417b77d15b4ac505eed5ae7bf2c5e. You should upgrade the affected component.

Affected Software

2 affected components

givanz Vvveb

Vvveb vvveb<1.0.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade givanz Vvveb to a version that resolves this vulnerability.
Fixed in 1.0.7Patch d4b1e030066417b77d15b4ac505eed5ae7bf2c5e

Event History

Aug 4, 2025

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jun 22, 58473

Event

via NVD·11:30 AM

Frequently Asked Questions

What is the severity of CVE-2025-8517?

CVE-2025-8517 has been declared as a critical vulnerability.

What type of vulnerability is CVE-2025-8517?