← All advisories

Moderate severityNVD Advisory· Published Mar 11, 2020· Updated Aug 5, 2024

CVE-2019-16107

CVE-2019-16107

Description

Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
phpbb/phpbbPackagist	>= 3.2.7, < 3.2.8	3.2.8

Affected products

2

phpBB/phpBBdescription
ghsa-coords
pkg:composer/phpbb/phpbb
Range: >= 3.2.7, < 3.2.8

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-wg24-9xm9-593vghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-16107ghsaADVISORY
www.phpbb.com/community/viewforum.phpghsax_refsource_MISCWEB
www.phpbb.com/community/viewtopic.phpghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.