CVE-2018-10678
First published: Sun May 13 2018(Updated: )
MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybb Mybb | =1.8.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-10678.
What is the affected software version?
The affected software version is MyBB 1.8.15.
What is the severity of CVE-2018-10678?
The severity of CVE-2018-10678 is medium with a CVSS score of 6.1.
How does CVE-2018-10678 impact Microsoft Edge users?
CVE-2018-10678 may allow remote attackers to conduct redirection attacks when MyBB 1.8.15 is accessed with Microsoft Edge.
Where can I find more information about CVE-2018-10678?
You can find more information about CVE-2018-10678 at the following references: [Security Focus](http://www.securityfocus.com/bid/104187) and [GitHub Gist](https://gist.github.com/MayurUdiniya/7aaa50b878d82b6aab6ed0b3e2b080bc)
- collector/nvd-index
- agent/weakness
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/mybb
- canonical/mybb mybb
- version/mybb mybb/1.8.15