GitHub Advisoryadvisory · Packagist

GHSA-hwq7-cvp8-6hm3 phpBB Open Redirect

MEDIUM Published 2022-05-17 Modified 2023-08-03 Official page ↗
Aliases
CVE-2015-3880
Ecosystem
Packagist
Packages
phpbb/phpbb
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601
Reviewed
2023-08-03

Affected packages

• Packagist phpbb/phpbb: < 3.0.14 → fixed in 3.0.14 • Packagist phpbb/phpbb: >= 3.1.0, < 3.1.4 → fixed in 3.1.4

Description

Open redirect vulnerability in phpBB before 3.0.14 and 3.1.x before 3.1.4 allows remote attackers to redirect users of Google Chrome to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2015-3880 Open redirect vulnerability in phpBB before 3.0.14 and 3.1.x before 3.1.4 allows remote attackers to redirect users of Google Chrome to… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References