CVEvulnerability
CVE-2022-25091
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-04-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-863
Description
Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the quote reply feature.
Affected configurations
• infopop ultimate bulletin board (<= 5.47a)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://www.infopop.com/support/ubbclassic/version5.html Broken Link
- https://marc.info/?l=vuln-dev&m=97486849231786&w=2 Mailing List
- https://vulners.com/securityvulns/SECURITYVULNS:DOC:954 Mailing List
- https://web.archive.org/web/20030207100935/ Not Applicable
- https://web.archive.org/web/20030207100935/http://www.infopop.com/support/ubbclassic/version5.html Release Notes
- http://www.infopop.com/support/ubbclassic/version5.html Broken Link
- https://marc.info/?l=vuln-dev&m=97486849231786&w=2 Mailing List
- https://vulners.com/securityvulns/SECURITYVULNS:DOC:954 Mailing List
- https://web.archive.org/web/20030207100935/ Not Applicable
- https://web.archive.org/web/20030207100935/http://www.infopop.com/support/ubbclassic/version5.html Release Notes