CVE-2014-8670

CVE-2014-8670 describes an open redirect vulnerability in the go.php script of vBulletin version 4.2.1. This flaw allows remote attackers to redirect users to arbitrary external websites by manipulating the 'url' parameter, facilitating phishing attacks. The vulnerability has a CVSS score of 5.8, indicating a medium severity with a network attack vector, medium access complexity, and potential for partial confidentiality and integrity impact. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, and it has received minimal community discussion or media coverage.