Description
feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum.
Remediation
References
Related Vulnerabilities
MongoDb Improper Authentication Vulnerability (CVE-2014-8180)
WordPress Plugin WP GDPR Multiple Vulnerabilities (2.1.1)
Drupal Core 8.7.x Security Bypass (8.7.0 - 8.7.10)
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.4)
WordPress Plugin TDO Mini Forms Arbitrary File Upload (0.13.9)