PT-2020-18483 · Phpbb Limited · Phpbb

Published 2020-01-14 · Updated 2024-03-06 · CVE-2020-5502

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions phpBB version 3.2.8

Description The issue allows for a CSRF attack, enabling the approval of pending group memberships without proper authorization.

Recommendations For phpBB version 3.2.8, update to a newer version that contains a fix for this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BIT-PHPBB-2020-5502

CVE-2020-5502

GHSA-69Q7-HWW4-8PJQ

Affected Products

Phpbb

References · 7

• https://blog.phpbb.com/category/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5502 · Security Note
• https://osv.dev/vulnerability/GHSA-69q7-hww4-8pjq · Vendor Advisory
• https://phpbb.com/community/viewtopic.php?f=14&t=2534536 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5502 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-phpbb-2020-5502 · Vendor Advisory
• https://github.com/phpbb/phpbb · Note