First published: Sun Mar 29 2015(Updated: )
Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
MyBB | <=1.8.3 |
http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2015-2786 is not explicitly rated, but it affects group join request notifications, potentially leading to privacy concerns.
To fix CVE-2015-2786, upgrade MyBB to version 1.8.4 or later.
MyBB versions prior to 1.8.4, specifically 1.8.3 and earlier, are affected by CVE-2015-2786.
CVE-2015-2786 involves unspecified attack vectors related to group join request notifications being sent to incorrect group leaders.
As of now, there is no detailed information available about active exploits for CVE-2015-2786.