What is GHSA-4hx9-p925-qcv7?

GHSA-4hx9-p925-qcv7 is a security advisory published by GitHub Security Advisories with Medium severity. phpBB Server side request forgery (SSRF)

Which CVE IDs does GHSA-4hx9-p925-qcv7 cover?

GHSA-4hx9-p925-qcv7 covers the following CVE IDs: CVE-2019-11767. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4hx9-p925-qcv7?

GHSA-4hx9-p925-qcv7 has a CVSS v3 base score of 5.8, published by GitHub Security Advisories.

Which products are affected by GHSA-4hx9-p925-qcv7?

GHSA-4hx9-p925-qcv7 affects 1 product, including: composer/phpbb/phpbb:\u003c 3.2.6.

GHSA-4hx9-p925-qcv7MediumCVSS 5.8

phpBB Server side request forgery (SSRF)

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2019-11767 →

📋 Description

Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.

🎯 Affected products1

composer/phpbb/phpbb:< 3.2.6

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2019-11767
https://www.phpbb.com/community/viewtopic.php?f=14&t=2509941
https://github.com/advisories/GHSA-4hx9-p925-qcv7