MyBB security analysis: Open source community helped squash hundreds of bugs

guest · Feb 25, 2020

MyBB security analysis: Open source community helped squash hundreds of bugs
February 25, 2020
https://portswigger.net/daily-swig/...urce-community-helped-squash-hundreds-of-bugs

The open source community has helped to protect websites running the MyBB forum software from more than 270 security vulnerabilities since it was launched in 2005, developers have confirmed.

In a blog post published ahead of the next major release, the MyBB development team offered a deep dive into the platform’s security ecosystem, noting that more than 100 bugs have been mitigated in the current branch alone.
Written in PHP, MyBB is popular open source software that’s thought to power more than 10,000 forum sites.
XSS tops the list
Almost half (49%) of the vulnerabilities in 1.8 branch of MyBB related to cross-site scripting (XSS). Of these, there were 36 cases of persistent XSS, 12 cases of reflected XSS, and one case of DOM-based XSS.

“The statistics specific to MyBB are consistent with more broad observations from web software, having XSS, access control issues, and injection the most common categories of vulnerabilities to be reported,” said the MyBB developers.
Click to expand...

At the time, Tomasz Mlynski of the MyBB project discussed the importance of coordinated disclosure for open source projects, telling The Daily Swig: [...]

Looking ahead, the MyBB platform is hoping to maintain the momentum it has established when it comes to vulnerability remediation, whilst allowing the ever-growing number of forum administrators to ensure their sites are as secure as possible.
Click to expand...

MyBB: A Close Look at 100+ Patched Vulnerabilities

With the release of MyBB 1.8.22, over one hundred vulnerabilities have been addressed in the 1.8 branch. In this post we look into what the numbers can tell us so far, and how the trends are expected to change in the future.
Click to expand...

Log in or Sign up

MyBB security analysis: Open source community helped squash hundreds of bugs

guest Guest

Log in or Sign up

MyBB security analysis: Open source community helped squash hundreds of bugs

guest Guest

Useful Searches