Description
Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpbb/phpbb | >= 3.2.7, < 3.2.8 | 3.2.8 | GHSA-wg24-9xm9-593v |
Medium · 4.3
CVE-2019-16107
EUVD-2022-5568GHSA-wg24-9xm9-593v
phpBB Cross-Site Request Forgery (CSRF)
Published Mar 11, 2020 · Updated Aug 5, 2024 · Assigned by mitre