Open Redirect Vulnerability in vBulletin Web Application by Internet Brands
CVE-2018-15493

6.1MEDIUM

Key Information:

Vendor

Vbulletin

Status
Vbulletin
Vendor
CVE Published:
17 October 2018

What is CVE-2018-15493?

The vBulletin platform version 5.4.3 suffers from an open redirect vulnerability that allows attackers to manipulate URL redirections, potentially facilitating phishing attacks or redirecting users to malicious sites. Users of this version are advised to assess their security posture and apply relevant mitigations to prevent exploitation of this vulnerability.

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Adv...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.