Description phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships. Remediation References CVE-2020-5502 Related Vulnerabilities concrete5 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-24986) WordPress Plugin AdminPad Cross-Site Request Forgery (2.1) MySQL CVE-2021-2024 Vulnerability (CVE-2021-2024) WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Multiple Vulnerabilities (1.29.3) Apache Traffic Server Integer Overflow or Wraparound Vulnerability (CVE-2018-9481) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities CWE-352 CVE-2020-5502