CVE-2016-6483
high · 8.6The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote attackers to conduct SSRF attacks via a crafted URL that results in a Redirection HTTP status code.
8.6
CVSS
11.9%
EPSS (exploit prob.)
96th
EPSS percentile
2016-09-02
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weaknesses
CWE-918
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| vbulletin | vbulletin | 3.8.7 |
| vbulletin | vbulletin | 3.8.8 |
| vbulletin | vbulletin | 3.8.9 |
| vbulletin | vbulletin | 4.2.2 |
| vbulletin | vbulletin | 4.2.3 |
| vbulletin | vbulletin | 5.2.0 |
| vbulletin | vbulletin | 5.2.1 |
| vbulletin | vbulletin | 5.2.2 |
Check a specific version with /api/v1/cve/match.
References
- http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txt
- http://www.securityfocus.com/bid/92350
- http://www.securitytracker.com/id/1036553
- http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349548-security-patch-vbulletin-3-8-7-3-8-8-3-8-9-3-8-10-beta
- http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349549-security-patch-vbulletin-4-2-2-4-2-3-4-2-4-beta
- http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349551-security-patch-vbulletin-5-2-0-5-2-1-5-2-2
- https://www.exploit-db.com/exploits/40225/
- http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txt
- http://www.securityfocus.com/bid/92350
- http://www.securitytracker.com/id/1036553
- http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349548-security-patch-vbulletin-3-8-7-3-8-8-3-8-9-3-8-10-beta
- http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349549-security-patch-vbulletin-4-2-2-4-2-3-4-2-4-beta
- http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349551-security-patch-vbulletin-5-2-0-5-2-1-5-2-2
- https://www.exploit-db.com/exploits/40225/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-6483