Unrated
phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.
CVE-2020-5502
First seen on SecPulse
Original description The description as published by the source.
phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory blog.phpbb.com
- advisory phpbb.com