Main Vulnerability Database Vulnerabilities #VU30733

Improper Restriction of Rendered UI Layers or Frames in vBulletin - CVE-2019-17131

Published: October 4, 2019 / Updated: July 17, 2020

Vulnerability identifier: #VU30733

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2019-17131

CWE-ID: CWE-1021

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: vBulletin

Affected software:
vBulletin

Detailed vulnerability description

The vulnerability allows a remote non-authenticated attacker to manipulate data.

vBulletin before 5.5.4 allows clickjacking.

Install update from vendor's website.