Description

Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.

Remediation

References

CVE-2019-11767

Related Vulnerabilities

Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-2750)

Magento CVE-2019-8111 Vulnerability (CVE-2019-8111)

Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2017-12174)

Apache Tomcat Other Vulnerability (CVE-2007-3383)

phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-6798)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-918 CVE-2019-11767