CVE-2020-5501 - phpBB 3.2.8 allows a CSRF attack that can modify a group avatar

MEDIUM

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar

Published Jan 14, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 0.38%

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://blog.phpbb.com/category/security		x_refsource_MISCVendor Advisory
https://github.com/advisories/GHSA-cpqc-g4r8-6hxg		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-5501
https://www.phpbb.com/community/viewtopic.php?f=14&t=2534536		x_refsource_CONFIRMVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 14, 2020

Updated Aug 4, 2024

Reserved Jan 5, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a