GHSA-4hx9-p925-qcv7

ghsaUSosv

phpBB Server side request forgery (SSRF)

view advisory published 2022-05-24Licence: CC-BY-4.0

Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-11767US	medium5.8	1.18% (68th)	—	2019-05-05
Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload f…

references

External citations — patches, advisories, analysis.

https://github.com/phpbb/phpbb-appPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2019-11767ADVISORY
https://www.phpbb.com/community/viewtopic.php?f=14&t=2509941WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan