CVE-2019-20225

MyBB before 1.8.22 allows an open redirect on login.

• CWE-601

• https://blog.mybb.com/2019/12/30/mybb-1-8-22-released-security-maintenance-release/Release Notes, Vendor Advisory
• https://mybb.com/versions/1.8.22/Release Notes, Vendor Advisory
• https://blog.mybb.com/2019/12/30/mybb-1-8-22-released-security-maintenance-release/Release Notes, Vendor Advisory
• https://mybb.com/versions/1.8.22/Release Notes, Vendor Advisory

Published

Jan 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-2022In rw_t3t_act_handle_fmt_rsp and rw_t3t_act_handle_sro_rsp o…
• CVE-2019-20220In Support Incident Tracker (SiT!) 3.67, the search_id param…6.1
• CVE-2019-20221In Support Incident Tracker (SiT!) 3.67, Load Plugins input …6.1
• CVE-2019-20222In Support Incident Tracker (SiT!) 3.67, the Short Applicati…6.1
• CVE-2019-20223In Support Incident Tracker (SiT!) 3.67, the id parameter is…6.1
• CVE-2019-20224netflow_get_stats in functions_netflow.php in Pandora FMS 7.…8.8
• CVE-2019-20226Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-20227Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-20228Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-20229Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-2023In ServiceManager::add function in the hardware service mana…
• CVE-2019-20230Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…