Design/Logic Flaw

vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories...

CVE-2019-17130

CVE-2019-17130 affects vBulletin up to version 5.5.4. The vulnerability is due to mishandling of external URLs in /core/vb/vurl.php and the /core/vb/vurl directories, enabling potential issues with URL handling. Connected sources corroborate the same affected product/version range and describe th...