PT-2017-6699 · Google+1 · Google Chrome+1

Avlidienbrunn + 1 · Publicado 2017-09-19 · Atualizado 2022-05-17 · CVE-2015-3880

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.0.14 phpBB versions 3.1.x prior to 3.1.4

Description The issue allows remote attackers to redirect users of Google Chrome to arbitrary web sites and conduct phishing attacks via unspecified vectors. This affects users by potentially tricking them into revealing sensitive information on fake websites.

Recommendations For versions prior to 3.0.14, update to version 3.0.14 or later. For versions 3.1.x prior to 3.1.4, update to version 3.1.4 or later.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2015-3880

GHSA-HWQ7-CVP8-6HM3

Produtos afetados

Google Chrome

Phpbb

Referências · 16

• https://github.com/phpbb/phpbb/commit/1a3350619f428d9d69d196c52128727e27ef2f04 · Correção
• https://github.com/phpbb/phpbb · Nota
• https://github.com/phpbb/phpbb/commit/c1702b8e19a69c98ef049abb4e14157e3e208ed4 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-3880 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2015-3880 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-3880 · Aviso do Fabricante
• https://web.archive.org/web/20170520103544/http://securityfocus.com/bid/74592 · Nota
• http://openwall.com/lists/oss-security/2015/05/12/10 · Correção
• http://securityfocus.com/bid/74592 · Nota
• http://openwall.com/lists/oss-security/2015/05/12/2 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3880 · Aviso do Fabricante
• https://phpbb.com/community/viewtopic.php?f=14&t=2313941 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-hwq7-cvp8-6hm3 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3880 · Nota
• https://wiki.phpbb.com/Release_Highlights/3.1.4 · Nota