CVE-2022-45867

MyBB before 1.8.33 allows Directory Traversal

High · published January 3, 2023

CVSS v3.1
7.2
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01558 · 75.0th percentile
Published
2023-01-03T00:00Z
EPSS history
Timeline
  • 03 JAN 00:00Z
    MyBB before 1.8.33 allows Directory Traversal
    cvelistv5