What is the CVSS score of CVE-2018-5259?

CVE-2018-5259 has a CVSS 3.0 base score of 8.8 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 2.0%.

Discuz CVE-2018-5259

HIGH

2018-01-08 cve@mitre.org

Authentication Bypass Discuz Discuzx

8.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jan 08, 2018 - 09:29 nvd

HIGH 8.8

DescriptionNVD

Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.

AnalysisAI

Discuz!. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter. Affected products include: Discuz Discuzx.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Discuz

View all

CVE-2026-49952 CRITICAL Act Now POC

9.3 Jun 15

Authentication bypass in Discuz! X5.0 releases 20260320 through 20260501 allows unauthenticated remote attackers to acce

CVE-2026-49954 HIGH This Week POC

8.6 Jun 15

Authenticated remote code execution in Discuz! X5.0 releases 20260320 through 20260501 allows administrators to chain a

CVE-2024-30884 HIGH This Week POC

7.1 Apr 11

Reflected Cross-Site Scripting (XSS) vulnerability in Discuz!. Rated high severity (CVSS 7.1), this vulnerability is rem

CVE-2026-49953 MEDIUM This Month POC

6.9 Jun 15

CAPTCHA challenge controls in Discuz! X5.0 (releases 20260320-20260501) can be reliably defeated by unauthenticated remo

CVE-2018-5376 MEDIUM This Month POC

6.1 Jan 12

Discuz!. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low a

CVE-2018-5375 MEDIUM This Month POC

6.1 Jan 12

Discuz!. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low a

CVE-2018-5377 CRITICAL Act Now

9.8 Jan 12

Discuz!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low

CVE-2018-10298 MEDIUM This Month POC

5.4 Apr 22

Discuz!. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exp

CVE-2018-10297 MEDIUM This Month POC

5.4 Apr 22

Discuz!. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exp

CVE-2018-5331 MEDIUM This Month POC

5.4 Jan 10

Discuz!. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exp

CVE-2018-19464 MEDIUM This Month

4.8 Nov 22

Discuz!. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2022-40684 CRITICAL POC

9.8

CVE-2025-61882 CRITICAL POC

9.8

CVE-2024-0012 CRITICAL POC

9.3

CVE-2023-46805 HIGH POC

8.2

CVE-2018-5259 vulnerability details – vuln.today

Back

Discuz CVE-2018-5259

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Discuz

Same technique Authentication Bypass

Share

External POC / Exploit Code