CSRF Vulnerability in JN-Jones MyBB-2FA Plugin for MyBB

CVE-2019-12363

What is CVE-2019-12363?

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the JN-Jones MyBB-2FA plugin for MyBB. This security flaw allows attackers to forge requests that can manipulate the state of the MyBB 2FA plugin. Specifically, an attacker can disable Two-Factor Authentication (2FA) via specific URL actions, which could compromise the security of user accounts and expose them to unauthorized access. Users are advised to verify the integrity of their 2FA settings and ensure they're running the latest version of the plugin to mitigate potential risks.

References