CVE-2021-3337

High

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by…

mitre·CWE-863·Published 2021-01-28

CVSS

7.5

EPSS

0.11

KEV

Exploits

cve.orgen

176 chars

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit.

NVDen

176 chars

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit.

El plugin Hide-Thread-Content hasta el 27-01-2021 para MyBB, permite a atacantes remotos omitir las restricciones de lectura de contenido previstas haciendo clic en responder o citar en el postbit

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N