CVE-2023-5917
1 advisory.
Packagist/phpbb/phpbb CVE-2023-5917: low 2.4, EPSS 0.53%
phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting
Action: Upgrade phpbb/phpbb to 3.3.11 or later.
composer require phpbb/phpbb:3.3.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.11 | - |
Fixed versions
| 3.3.11 |
Sources
- osv: GHSA-gmx8-8rff-qv6q
- https://nvd.nist.gov/vuln/detail/CVE-2023-5917
- https://github.com/phpbb/phpbb-app/commit/a3a84334f1c17ee57cc9af3d84996af8772736d3
- https://github.com/phpbb/phpbb/commit/ccf6e6c255d38692d72fcb613b113e6eaa240aac
- https://github.com/phpbb/phpbb-app
- https://github.com/phpbb/phpbb/releases/tag/release-3.3.11
- https://vuldb.com/?ctiid.244307
- https://vuldb.com/?id.244307
- https://www.phpbb.com
- https://www.phpbb.com/community/viewtopic.php?t=2646991
CVE-2023-5917 · published · modified · JSON