Description
phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpbb/phpbb | < 3.2.9 | 3.2.9 | GHSA-69q7-hww4-8pjq |
Medium · 6.5
CVE-2020-5502
BIT-phpbb-2020-5502EUVD-2022-2764GHSA-69q7-hww4-8pjq
phpBB allows CSRF
Published Jan 14, 2020 · Updated Aug 4, 2024 · Assigned by mitre