CVE-2024-23335

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

MyBB is a free and open source forum software. The backup management module of the Admin CP may accept `.htaccess` as the name of the backup file to be deleted, which may expose the stored backup files over HTTP on Apache servers. MyBB 1.8.38 resolves this issue. Users are advised to upgrade. There are no known workarounds for this vulnerability

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: May 1, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-233365.0MyBB is a free and open source forum software. The default list of disallowed remote hosts does not contain the `127.0.0.0/8` block, which m CVE-2024-233376.5jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index o CVE-2024-233396.5hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to vers CVE-2024-23346.4The Template Kit – Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the template upload functionality in all ver CVE-2024-233405.3@hono/node-server is an adapter that allows users to run Hono applications on Node.js. Since v1.3.0, @hono/node-server has used its own Requ CVE-2024-233416.1TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting senten CVE-2024-233427.4The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital CVE-2024-233446.5Tuleap is an Open Source Suite to improve management of software developments and collaboration. Some users might get access to restricted i CVE-2024-233455.4Nautobot is a Network Source of Truth and Network Automation Platform built as a web application. All users of Nautobot versions earlier th CVE-2024-233467.8Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in th CVE-2024-233477.8Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of CVE-2024-233488.8Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3