CVE-2017-1000419

Опубликовано: 02 янв. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content and potentially attacking such internal services via the web application.

Ссылки

https://www.phpbb.com/community/viewtopic.php?f=14&p=14782136
Vendor Advisory
https://www.sec-consult.com/en/blog/advisories/phpbb-server-side-request-forgery-vulnerability/index.html
Exploit
Third Party Advisory
https://www.phpbb.com/community/viewtopic.php?f=14&p=14782136
Vendor Advisory
https://www.sec-consult.com/en/blog/advisories/phpbb-server-side-request-forgery-vulnerability/index.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpbb:phpbb:3.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.0038

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-918

Связанные уязвимости

CVE-2017-1000419

CVSS3: 7.5

ubuntu

около 8 лет назад

CVE-2017-1000419

CVSS3: 7.5

debian

около 8 лет назад

phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar functio ...

GHSA-9jm4-rg99-566c

CVSS3: 7.5

github

больше 3 лет назад

phpBB Server-Side Request Forgery (SSRF)

EPSS

Процентиль: 59%

0.0038

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-918