GHSA-8h9c-rcwj-jg8pHighCVSS 6.8

phpBB 3.0.7 allows remote attackers to bypass intended access restrictions

Published
May 17, 2022
Last Modified
October 30, 2024

🔗 CVE IDs covered (1)

CVE-2010-1627 →

📋 Description

feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum.

🎯 Affected products1

  • composer/phpbb/phpbb:> 3.0.6, < 3.0.7-PL1

🔗 References (7)