Vulnerabilidades de Atjiu
CVEs publicadas que afetam produtos de Atjiu: 3 registro(s), com severidade, exploração e correções.
CVE-2026-4495
Baixa · 3.5
CWE-79 20/03/2026
atjiu pybbs CommentApiController.java create cross site scripting
A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/yiiu/pybbs/controller/api/CommentApiController.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-4494
Baixa · 3.5
CWE-79 20/03/2026
atjiu pybbs TopicApiController.java create cross site scripting
A vulnerability was identified in atjiu pybbs 6.0.0. This affects the function create of the file src/main/java/co/yiiu/pybbs/controller/api/TopicApiController.java. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
CVE-2025-12297
Média · 4.3
CWE-200 27/10/2025
atjiu pybbs UserApiController.java information disclosure
A vulnerability was detected in atjiu pybbs up to 6.0.0. This affects an unknown function of the file UserApiController.java. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is now public and may be used.