Medium severity5.8OSV Advisory· Published Aug 17, 2020· Updated Jun 17, 2026
CVE-2020-8226
CVE-2020-8226
Description
A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
phpbb/phpbbPackagist | >= 3.2.0, < 3.2.10 | 3.2.10 |
phpbb/phpbbPackagist | >= 3.3.0, < 3.3.1 | 3.3.1 |
Affected products
4- osv-coords2 versions
< 3.2.10+ 1 more
- (no CPE)range: < 3.2.10
- (no CPE)range: >= 3.2.0, < 3.2.10
Patches
Vulnerability mechanics
References
7- www.phpbb.com/community/viewtopic.phpnvdPatchRelease NotesVendor AdvisoryWEB
- www.phpbb.com/community/viewtopic.phpnvdPatchRelease NotesVendor AdvisoryWEB
- github.com/advisories/GHSA-jhm9-h84h-rw83ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-8226ghsaADVISORY
- github.com/FriendsOfPHP/security-advisories/blob/master/phpbb/phpbb/CVE-2020-8226.yamlghsaWEB
- github.com/phpbb/phpbb-app/commit/0cfaaafb386d58576d200d56f1acdbcc2f2376e8ghsaWEB
- github.com/phpbb/phpbb-app/commit/efc0a146bf12125eeb71d00470af774326a7bf0aghsaWEB
News mentions
0No linked articles in our index yet.