Directory Traversal Vulnerability in MyBB Admin CP Languages Module
CVE-2022-45867

7.2HIGH

Key Information:

Vendor

Mybb

Status
Mybb
Vendor
CVE Published:
3 January 2023

What is CVE-2022-45867?

The MyBB platform, specifically versions prior to 1.8.33, is susceptible to a directory traversal vulnerability in its Admin CP Languages module. This flaw permits remote authenticated users with elevated privileges to exploit the system, enabling local file inclusion and execution of files on the server. Such vulnerabilities can lead to severe security risks, compromising the integrity and confidentiality of sensitive data.

References

https://github.com/mybb/mybb/security/advisories/GHSA-cpf...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.