CVE-2018-10678

MEDIUM

MyBB 1.8.15 - Open Redirect via Target Attribute Handling

Title source: llm
STIX 2.1

Description

MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/104187

Scores

CVSS v3 6.1
EPSS 0.0103
EPSS Percentile 59.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-601
Status published
Products (1)
mybb/mybb 1.8.15
Published May 13, 2018
Tracked Since Feb 18, 2026