CVE-2020-5502

phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2020-01-15

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Phpbb (Phpbb)

References

• https://blog.phpbb.com/category/security/
• https://www.phpbb.com/community/viewtopic.php?f=14&t=2534536