In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function, aka VBV-17037.
References
Link | Resource |
---|---|
https://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4367744-vbulletin-5-3-0-connect-is-now-available | Release Notes Third Party Advisory |
Configurations
History
No history.
Information
Published : 2017-04-06 17:59
Updated : 2024-02-28 15:44
NVD link : CVE-2017-7569
Mitre link : CVE-2017-7569
CVE.ORG link : CVE-2017-7569
JSON object : View
Products Affected
vbulletin
- vbulletin
CWE
CWE-918
Server-Side Request Forgery (SSRF)