Packagist/phpbb/phpbb CVE-2019-16993: high 8.8, EPSS 0.80%
phpBB Cross-Site Request Forgery (CSRF)
Action: Upgrade phpbb/phpbb to 3.1.7-PL1 or later.
composer require phpbb/phpbb:3.1.7-PL1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.7-PL1 | - |
Fixed versions
| 3.1.7-PL1 |
Sources
- osv: GHSA-vj3x-vfm4-hvxc
- https://nvd.nist.gov/vuln/detail/CVE-2019-16993
- https://github.com/phpbb/phpbb/commit/18abef716ecf42a35416444f3f84f5459d573789
- https://github.com/phpbb/phpbb-app
- https://lists.debian.org/debian-lts-announce/2019/09/msg00036.html
- https://lists.debian.org/debian-lts-announce/2019/10/msg00006.html
- https://www.phpbb.com/community/viewtopic.php?t=2352606
- https://www.phpbb.com/support/documents.php?mode=changelog&version=3#v317
CVE-2019-16993 · published · modified · JSON