Description

Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.

Remediation

References

CVE-2019-11767

Related Vulnerabilities

WordPress Plugin Browser and Operating System Finder Cross-Site Request Forgery (1.1)

WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10152)

WordPress Plugin WP Download Codes Cross-Site Scripting (2.5.1)

WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (3.34)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1450)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-918 CVE-2019-11767