CVE-2018-6200: Medium severity vBulletin vBulletin vulnerability
Published Jan 25, 2018
·Updated
vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter.
Affected Software
2 affected components
vBulletin vBulletin>=3.0.0<=3.8.11
vBulletin vBulletin>=4.2.0<=4.2.5
Event History
Jan 25, 2018
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Data Sourced
via NVD·04:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2018-6200?
CVE-2018-6200 is a vulnerability in vBulletin versions 3.x.x and 4.2.x through 4.2.5 that allows for an open redirect via the redirector.php URL parameter.
2
How does CVE-2018-6200 affect vBulletin?
CVE-2018-6200 affects vBulletin versions 3.x.x and 4.2.x through 4.2.5.
3
What is the severity of CVE-2018-6200?
The severity of CVE-2018-6200 is medium with a CVSS score of 6.1.
4
How can the CVE-2018-6200 vulnerability be exploited?
The vulnerability CVE-2018-6200 can be exploited by manipulating the redirector.php URL parameter to perform an open redirect.
5
Is there a fix available for CVE-2018-6200?
Yes, a fix is available for CVE-2018-6200. It is recommended to update vBulletin to a version that is not affected by this vulnerability.