Description
In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function, aka VBV-17037.
Unscored
CVE-2017-7569
EUVD-2017-16574GHSA-xc4w-h9rq-68jx
In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the P…
Published Apr 6, 2017 · Updated Sep 16, 2024 · Assigned by mitre