Description
MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.
Remediation
References
Related Vulnerabilities
MySQL CVE-2022-21594 Vulnerability (CVE-2022-21594)
WordPress Plugin Far Future Expiry Header Cross-Site Request Forgery (1.4)
PHP Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2004-0594)
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.8)
Liferay Portal Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-33323)