Description
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpbb/phpbb | >= 3.2.8, < 3.2.9 | 3.2.9 | GHSA-cpqc-g4r8-6hxg |
Medium · 4.3
CVE-2020-5501
BIT-phpbb-2020-5501EUVD-2022-3605GHSA-cpqc-g4r8-6hxg
phpBB Cross-Site Request Forgery (CSRF)
Published Jan 14, 2020 · Updated Aug 4, 2024 · Assigned by mitre