CVE-2022-45867: Path Traversal
Published Jan 3, 2023
·Updated
MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution.
Affected Software
1 affected component
Mybb Mybb<1.8.33
Remediation
Event History
Jan 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for the MyBB vulnerability?
The vulnerability ID for the MyBB vulnerability is CVE-2022-45867.
2
What is the severity of CVE-2022-45867?
The severity of CVE-2022-45867 is high with a severity value of 7.2.
3
What does CVE-2022-45867 allow?
CVE-2022-45867 allows for Directory Traversal.
4
Which version of MyBB is affected by CVE-2022-45867?
MyBB versions before 1.8.33 are affected by CVE-2022-45867.
5
How can remote authenticated users exploit CVE-2022-45867?
Remote authenticated users with high privileges can exploit CVE-2022-45867 to achieve local file inclusion and execution.