PT-2020-18482 · Phpbb Limited · Phpbb

Published 2020-01-14 · Updated 2024-03-06 · CVE-2020-5501

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpBB version 3.2.8

Description The issue allows for a CSRF attack, which can be used to modify a group avatar.

Recommendations For phpBB version 3.2.8, update to a newer version that contains a fix for this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BIT-PHPBB-2020-5501

CVE-2020-5501

GHSA-CPQC-G4R8-6HXG

Affected Products

Phpbb

References · 7

• https://osv.dev/vulnerability/BIT-phpbb-2020-5501 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5501 · Security Note
• https://blog.phpbb.com/category/security · Vendor Advisory
• https://phpbb.com/community/viewtopic.php?f=14&t=2534536 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cpqc-g4r8-6hxg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5501 · Vendor Advisory
• https://github.com/phpbb/phpbb-app · Note