CVE-2023-41362: Code Injection
Published Aug 29, 2023
·Updated
MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling interfered with this when using PCRE within PHP.
Affected Software
1 affected component
Mybb Mybb<1.8.36
Remediation
Event History
Aug 29, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-41362?
CVE-2023-41362 is a vulnerability in MyBB before version 1.8.36 that allows code injection by users with certain high privileges.
2
How severe is CVE-2023-41362?
CVE-2023-41362 has a severity keyword of 'high' and a severity value of 7.2.
3
What software is affected by CVE-2023-41362?
The MyBB software before version 1.8.36 is affected by CVE-2023-41362.
4
How can I fix CVE-2023-41362?
To fix CVE-2023-41362, you should update MyBB to version 1.8.36 or newer.
5
What is CWE-94?
CWE-94 is a vulnerability related to code injection.