PT-2018-10048
CVE-2018-10678
·
تاريخ النشر
2018-05-13
·
تاريخ التحديث
2018-06-05
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MyBB version 1.8.15
Description
The issue concerns the mishandling of 'target=" blank" rel="noopener"' in A elements by MyBB 1.8.15 when accessed with Microsoft Edge. This makes it easier for remote attackers to conduct redirection attacks.
Recommendations
For MyBB version 1.8.15, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾