PT-2017-6699 · Google+1 · Google Chrome+1

Avlidienbrunn + 1 · Published 2017-09-19 · Updated 2022-05-17 · CVE-2015-3880

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.0.14 phpBB versions 3.1.x prior to 3.1.4

Description The issue allows remote attackers to redirect users of Google Chrome to arbitrary web sites and conduct phishing attacks via unspecified vectors. This affects users by potentially tricking them into revealing sensitive information on fake websites.

Recommendations For versions prior to 3.0.14, update to version 3.0.14 or later. For versions 3.1.x prior to 3.1.4, update to version 3.1.4 or later.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2015-3880

GHSA-HWQ7-CVP8-6HM3

Affected Products

Google Chrome

Phpbb

References · 16

• https://github.com/phpbb/phpbb/commit/1a3350619f428d9d69d196c52128727e27ef2f04 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-3880 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-3880 · Security Note
• https://ubuntu.com/security/CVE-2015-3880 · Vendor Advisory
• http://openwall.com/lists/oss-security/2015/05/12/10 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3880 · Vendor Advisory
• https://phpbb.com/community/viewtopic.php?f=14&t=2313941 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hwq7-cvp8-6hm3 · Vendor Advisory
• https://github.com/phpbb/phpbb · Note
• https://github.com/phpbb/phpbb/commit/c1702b8e19a69c98ef049abb4e14157e3e208ed4 · Note
• https://web.archive.org/web/20170520103544/http://securityfocus.com/bid/74592 · Note
• http://securityfocus.com/bid/74592 · Note
• http://openwall.com/lists/oss-security/2015/05/12/2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3880 · Note
• https://wiki.phpbb.com/Release_Highlights/3.1.4 · Note