First published: Fri Oct 04 2019(Updated: )
vBulletin before 5.5.4 allows clickjacking.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
vBulletin vBulletin | <5.5.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-17131 refers to a vulnerability in vBulletin before version 5.5.4 that allows clickjacking.
CVE-2019-17131 has a severity rating of 4.3 out of 10, which is considered medium.
CVE-2019-17131 allows clickjacking by not implementing proper protection against clickjacking attacks.
Yes, vBulletin version 5.5.4 is affected by CVE-2019-17131.
To fix the CVE-2019-17131 vulnerability, you should update vBulletin to version 5.5.4 or later.