Servers and applications
CVE-2019-11767
Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.
- Severity
- Medium 5.8
- Published
- 5 May 2019
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 3.2.6
- Exploit chance
- 1.2% in the next 30 daysHigher than 67% of CVEs. EPSS by FIRST, 10 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
phpBBServers and applications · cpe:a:phpbb:phpbb |
|