vBulletin software vulnerability

[Gavino]

It was recently reported that there is a dangerous vulnerability in the vBulletin software that could allow a hacker to hijack any vBulletin-based forum server.

https://www.theregister.co.uk/2019/09/24/vbulletin_vbug_zeroday/

I hope the Doom9 forum admins are already on the case ...

[filler56789]

Well, the article says "version 5 of vBulletin", whereas Doom9 still uses version 3.8.11... I am no expert but I suppose /hope the old versions don't have that flaw.

[stax76]

The article talks about v5 so Doom9 might not be affected because it's older than v5.

[Swede]

I search for that vulnerability in the 3.8.x-code we're running at the time it was reported and it's just not there. It has to do with a much newer part of vbb. So, if nothing else, we can be glad that we're running on a steamtrain.

[Gavino]

Thanks, Swede.
It's reassuring to know.