External URL Handling Flaw in vBulletin by Internet Brands
CVE-2019-17130

6.5MEDIUM

Key Information:

Vendor

Vbulletin

Status
Vbulletin
Vendor
CVE Published:
4 October 2019

What is CVE-2019-17130?

vBulletin versions up to 5.5.4 have a vulnerability that results from improper handling of external URLs in the /core/vb/vurl.php file and the corresponding /core/vb/vurl directories. This flaw can potentially expose the system to security risks by allowing unauthorized access or manipulation of external resources. Website administrators using these versions should consider upgrading to the latest version to mitigate risks associated with this vulnerability.

References

https://forum.vbulletin.com/forum/vbulletin-announcements...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.