VWE-2018-4972

Common Name	None
VWE-ID	VWE-2018-4972
Related Report	None
Severity	LOW
Exploit Difficulty	EASY
Platform	vBulletin 3.x
Description	Permissions Escalation. Users may be able to use smilies in wiki content even if they don't have permission to use smilies or even if the area does not permit smilies.
Discovered	December 20, 2018
Resolved	January 22, 2019
Patches Available	4.0.24 Patch Level 2 4.0.23 Patch Level 4 4.0.22 Patch Level 6 4.0.21 Patch Level 7
Workaround	It is not possible to workaround this issue.

The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.

Notes

After uploading the patch, you will need to run the VaultWiki upgrade script in order to apply the changes.