CVE-2022-25091
- State
- Published
- Severity
- 5.3 Medium
- Published
- Apr 27, 2023
- Updated
- Feb 3, 2025
- Reserved
- Feb 14, 2022
Description
Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the quote reply feature.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | CISA-ADP |
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://marc.info/?l=vuln-dev&m=97486849231786&w=2
- https://vulners.com/securityvulns/SECURITYVULNS:DOC:954
- https://web.archive.org/web/20030207100935/
- http://www.infopop.com/support/ubbclassic/version5.html
- https://web.archive.org/web/20030207100935/http://www.infopop.com/support/ubbclassic/version5.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.