vBulletin < 5.3.0 Server-Side Request Forgery Vulnerability
Medium Web Application Scanning Plugin ID 98778
Synopsis
vBulletin < 5.3.0 Server-Side Request Forgery Vulnerability
Description
According to the self-reported version in its response header, the version of vBulletin hosted on the remote web server is < 5.3.0. It is, therefore, affected by a Server-Side Request Forgery (SSRF) vulnerability due to PHP parse_url function.
Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to vBulletin version 5.3.0 or later.