PT-2018-17772 · Mybb · Mybb

Pranav Jagtap + 1 · Publicado 2018-02-08 · Atualizado 2018-02-26 · CVE-2018-6844

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MyBB version 1.8.14

Description The issue allows for XSS via the Title or Description field on the Edit Forum screen.

Recommendations For MyBB version 1.8.14, update to a version that contains a fix for this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-6844

Produtos afetados

Mybb

Referências · 3

• https://websecnerd.blogspot.com/2018/02/mybb-forum-1.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6844 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6844 · Aviso do Fabricante