CVE-2024-23336

MyBB is a free and open source forum software. The default list of disallowed remote hosts does not contain the "127.0.0.0/8" block, which may result in a Server-Side Request Forgery SSRF vulnerability. The Configuration File's Disallowed Remote Addresses list "$config'disallowedremoteaddresses'"...