MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks.
References
Link | Resource |
---|---|
https://gist.github.com/MayurUdiniya/7aaa50b878d82b6aab6ed0b3e2b080bc | Third Party Advisory |
http://www.securityfocus.com/bid/104187 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2018-05-13 13:29
Updated : 2018-06-05 06:03
NVD link : CVE-2018-10678
Mitre link : CVE-2018-10678
JSON object : View
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
Products Affected
mybb
- mybb