> MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, > which makes it easier for remote attackers to conduct redirection attacks. > > ------------------------------------------ > > [Additional Information] > is parsing link with target="_blank" rel="noopener" > malicious.html MyBB users with Microsoft Edge browser are vulnerable for this attack > > ------------------------------------------ > > [VulnerabilityType Other] > target=_blanket Phishing attack in chat > > ------------------------------------------ > > [Vendor of Product] > MyBB > > ------------------------------------------ > > [Affected Product Code Base] > MyBB - Version 1.8.15 > > ------------------------------------------ > > [Affected Component] > MyBB, formerly MyBBoard and originally MyBulletinBoard, is a free and open source forum software developed by the MyBB Group > > ------------------------------------------ > > [Attack Type] > Remote > > ------------------------------------------ > > [CVE Impact Other] > Phishing & Invalidate redirect > > [Discoverer] > Mayur Udiniya > > ------------------------------------------ > > [Reference] > https://blog.mybb.com