CVE-2014-8870

2015-01-1515:59:16

[email protected]

web.nvd.nist.gov

cve-2014-8870

open redirect

vulnerability

tapatalk

woltlab burning board 4.0

phishing

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%

JSON

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the board_url parameter.

Affected configurations

NVD

Node

tapatalktapatalkMatch1.0.0wotlab_burning_board

tapatalktapatalkMatch1.0.1wotlab_burning_board

tapatalktapatalkMatch1.0.2wotlab_burning_board

tapatalktapatalkMatch1.1.0wotlab_burning_board

tapatalktapatalkMatch1.1.1wotlab_burning_board

CPENameOperatorVersion
tapatalk:tapatalktapatalkeq1.0.0
tapatalk:tapatalktapatalkeq1.0.1
tapatalk:tapatalktapatalkeq1.0.2
tapatalk:tapatalktapatalkeq1.1.0
tapatalk:tapatalktapatalkeq1.1.1

CPE	Name	Operator	Version
tapatalk:tapatalk	tapatalk	eq	1.0.0
tapatalk:tapatalk	tapatalk	eq	1.0.1
tapatalk:tapatalk	tapatalk	eq	1.0.2
tapatalk:tapatalk	tapatalk	eq	1.1.0
tapatalk:tapatalk	tapatalk	eq	1.1.1