Mayhemic

**Name of the Vulnerable Software and Affected Versions** MBoard versions 1.22 and earlier **Description** A directory traversal issue exists, allowing remote attackers to create arbitrary empty files by utilizing a .. (dot dot) in the `orig id` parameter of the mboard.php file. **Recommendations** For versions 1.22 and earlier, as a temporary workaround, consider restricting access to the mboard.php file until a patch is available. Avoid using the `orig id` parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.