logo

Database

Server-side request forgery (SSRF) In phpbb/phpbb

Description

phpBB Server side request forgery (SSRF) Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions