Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
Remediation
References
Related Vulnerabilities
concrete5 Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-22958)
WordPress Plugin Qtranslate Slug Cross-Site Request Forgery (1.1.18)
Oracle JRE CVE-2013-5801 Vulnerability (CVE-2013-5801)
WordPress 4.4.x Same Origin Method Execution (SOME) Vulnerability (4.4 - 4.4.2)
Drupal Incorrect Authorization Vulnerability (CVE-2011-2726)