Описание
Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| phpbb3 | removed | package | ||
| phpbb3 | postponed | jessie | package |
Примечания
https://www.phpbb.com/community/viewtopic.php?f=14&t=2509941
EPSS
Процентиль: 45%
0.00222
Низкий
Связанные уязвимости
CVSS3: 5.8
ubuntu
почти 7 лет назад
Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.
CVSS3: 5.8
nvd
почти 7 лет назад
Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.
EPSS
Процентиль: 45%
0.00222
Низкий