MyBB 1.8.41
SecurityMaintenance
code 1841
Full Package
Install a new MyBB forum or upgrade from older versions.
.zip – 2.22 MB
Download from MyBB.com Download from GitHub.com (mirror)sha512:
00d4c742782e23319698c758293cd272d5fc9a6093caad739403fc99963331d8d7cfaafbd25d3acdf003c64b29b4f471568ce5c388b469947f756fee7917933e
More checksums…
sha256:
48cc76e9e1146ea052756575991f43f51a634f125eea06d05ce9041b03eedeaa
sha1:
e35b56cdd9c391028593ce3097078c33d09e3268
md5:
3bfa90b309a8f6d8cf7314228ad0a7ec
Changed Files
Upgrade from the previous version.
.zip – 0.23 MB
Download from MyBB.com Download from GitHub.com (mirror)sha512:
a61eb1c5bafeead054c4bf243395f8404be320c35f8284d99ea2ba510c082f9778a8147565d4e7704dbaab169216dc949b8b674893291243b0733813a940377b
More checksums…
sha256:
cc48f46d24d50e958da6c0a36a6075d0c6a1df7f3b220831e50d61dbeeb5ebef
sha1:
163ee6979ccc88bf4bd3d41c727f90e39c74a608
md5:
79ce174c0965bdb31f534e715d6dce83
Upgrading to this Version
To upgrade from the previous version: copy and overwrite files from the Changed Files package.
Upgrading from older versions may require running the install/ upgrade script.
Before performing any upgrade, remember to backup your forum’s files and database and store them safely.
If you have edited core files, including language files, please make sure you make a changelog for these changes so you can make them again (if necessary) once the upgrade is complete.
Follow the Upgrade Documentation for more detailed instructions.
Security Vulnerabilities Addressed (24)
Attachment header suppression XSS advisory
CWE-93
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Reported by valent1
Insufficient authorization for draft attachments advisory
CWE-639
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Reported by Nathan Malcolm, Moniruzzaman Prodhan, Aria Akhavan
Haikhavan
Multiquote insufficient authorization advisory
CWE-639
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Reported by Aria Akhavan
Haikhavan
Delayed moderation insufficient authorization advisory
CWE-639
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Reported by Aria Akhavan
Haikhavan
Newreply quote moderator insufficient authorization advisory
CWE-639
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Reported by Aria Akhavan
Haikhavan
Online status insufficient threads authorization advisory
CWE-863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Reported by Aria Akhavan
Haikhavan
Search insufficient threads authorization advisory
CWE-863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Reported by Aria Akhavan
Haikhavan
ACP Ban group insufficient validation advisory
CWE-266
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Reported by Devilshakerz
MyBB Team
ACP Awaiting Activation group modification advisory
CWE-457
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Reported by Devilshakerz
MyBB Team
ACP Awaiting Activation insufficient type distinction advisory
CWE-351
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Reported by Devilshakerz
MyBB Team
ACP Login attempt improper restriction advisory
CWE-307
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Reported by Devilshakerz
MyBB Team
ACP Users View Manager XSS advisory
CWE-79
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
Reported by Aria Akhavan
Haikhavan
New Reply insufficient threads authorization advisory
CWE-863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Reported by Aria Akhavan
Haikhavan
New Reply Thread Review insufficient authorization advisory
CWE-862
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Reported by Devilshakerz
MyBB Team
Disabled video MyCode XSS advisory
CWE-83
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Reported by Himanshu Anand
Custom moderator tools insufficient forum authorization advisory
CWE-862
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Reported by Devilshakerz
MyBB Team
Attachment moderation insufficient authorization advisory
CWE-639
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Reported by Aria Akhavan
Haikhavan
Post moderation insufficient destination authorization advisory
CWE-639
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Reported by Aria Akhavan
Haikhavan
Mod CP reports insufficient authorization advisory
CWE-863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Reported by Aria Akhavan
Haikhavan
Moderation Queue insufficient authorization advisory
CWE-863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Reported by Aria Akhavan
Haikhavan
Email User Ignore List insufficient authorization advisory
CWE-639
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Reported by meifukun
Group Management insufficient authorization advisory
CWE-639
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Reported by meifukun