CVE-2022-45867

MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2023-01-03

Last modified

2025-04-10

Weaknesses

CWE-22

Affected products

• Mybb (Mybb)

References

• https://github.com/mybb/mybb/security/advisories/GHSA-cpfv-6f8w-759r