vBulletin 5.2.2 / 4.2.3 / 3.8.9 Server Side Request Forgery vBulletin versions 5.2.2 and below, 4.2.3 and below, and 3.8.9 and below suffer from a pre-auth server side request forgery vulnerability. Leave a ReplyYou must be logged in to post a comment. Filed under: exploit - @ August 10, 2016 8:34 am