VULNERABILITY INTELLIGENCE

CVE-2019-11767

CVSS score5.8 MEDIUM
EPSS probability1.18%
CISA KEVNot currently listed
Published2019-05-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Description

Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.

Weakness classification

  • CWE-918: Server-Side Request Forgery (SSRF)

Primary references