| Package | Affected versions | Patched versions |
|---|---|---|
| merge system | ≤ 1.8.7 | |
| mybb | ≤ 1.8.7 |
The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free