Server-side request forgery (SSRF) In phpbb/phpbb
Description
phpBB Server side request forgery (SSRF) Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
packagist | 3.2.6 |
Aliases
1. 2. 3. 4.
References
1.