| Package | Affected versions | Patched versions |
|---|---|---|
| vbulletin | = 3.8.7 |
vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a sufficiently large buddy list, processing the list can consume excessive memory, exhausting system resources and crashing the forum.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free