VULNERABILITY INTELLIGENCE
CVE-2010-3713
CVSS score4.3 MEDIUM
EPSS probability1.16%
CISA KEVNot currently listed
Published2010-10-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed.