CVE-2020-5501

描述

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.

受影響套件(2)

• Bitnami/phpbb>= 3.2.8, <= 3.2.8
• Packagist/phpbb/phpbb>= 3.2.8, < 3.2.9

CVSS 分數

參考連結(5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-5501
• PATCHhttps://github.com/phpbb/phpbb-app
• WEBhttps://blog.phpbb.com/category/security
• WEBhttps://blog.phpbb.com/category/security/
• WEBhttps://www.phpbb.com/community/viewtopic.php?f=14&t=2534536