CVE-2010-3713

2010-10-2722:00:00

redhat

www.cve.org

usebb

rss.php

access restriction bypass

cve-2010-3713

forum configuration

remote attack

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

65.6%

JSON

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed.