{"action":"Upgrade phpbb/phpbb to 3.1.7-PL1 or later.","affected":[{"fixed":"3.1.7-PL1","introduced":"0"}],"component":"phpbb/phpbb","cve_ids":["CVE-2019-16993"],"ecosystem":"Packagist","epss":0.00804,"exploited":false,"fixed_versions":["3.1.7-PL1"],"ghsa_id":"GHSA-vj3x-vfm4-hvxc","id":"tcs_01M5KF97SSEYTFG9ASXNEZAMZV","modified_at":"2024-04-24T17:57:36.508064Z","published_at":"2022-05-24T16:57:09Z","references":["https://osv.dev/vulnerability/GHSA-vj3x-vfm4-hvxc","https://nvd.nist.gov/vuln/detail/CVE-2019-16993","https://github.com/phpbb/phpbb/commit/18abef716ecf42a35416444f3f84f5459d573789","https://github.com/phpbb/phpbb-app","https://lists.debian.org/debian-lts-announce/2019/09/msg00036.html","https://lists.debian.org/debian-lts-announce/2019/10/msg00006.html","https://www.phpbb.com/community/viewtopic.php?t=2352606","https://www.phpbb.com/support/documents.php?mode=changelog&version=3#v317"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-vj3x-vfm4-hvxc","url":"https://osv.dev/vulnerability/GHSA-vj3x-vfm4-hvxc"}],"summary":"phpBB Cross-Site Request Forgery (CSRF)"}