CVE-2015-3880: Medium severity phpbb prillian vulnerability
Published Sep 19, 2017
·Updated
Open redirect vulnerability in phpBB before 3.0.14 and 3.1.x before 3.1.4 allows remote attackers to redirect users of Google Chrome to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
25 affected componentsFixes available
composer/phpbb/phpbb>=3.1.0<3.1.4
3.1.4
composer/phpbb/phpbb<3.0.14
3.0.14
phpBB phpbb<=3.0.14
phpBB phpbb=3.1.0
phpBB phpbb=3.1.0-a1
phpBB phpbb=3.1.0-a2
phpBB phpbb=3.1.0-a3
phpBB phpbb=3.1.0-b1
phpBB phpbb=3.1.0-b2
phpBB phpbb=3.1.0-b3
phpBB phpbb=3.1.0-b4
phpBB phpbb=3.1.0-rc1
phpBB phpbb=3.1.0-rc2
phpBB phpbb=3.1.0-rc3
phpBB phpbb=3.1.0-rc4
phpBB phpbb=3.1.0-rc5
phpBB phpbb=3.1.0-rc6
phpBB phpbb=3.1.1
phpBB phpbb=3.1.2
phpBB phpbb=3.1.2-rc1
phpBB phpbb=3.1.3
phpBB phpbb=3.1.3-rc1
phpBB phpbb=3.1.3-rc2
phpBB phpbb=3.1.4-rc1
phpBB phpbb=3.1.4-rc2
Remediation
Patch Available
Event History
Sep 19, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
May 17, 2022
Advisory Published
12:47 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-3880?
CVE-2015-3880 is classified as a medium severity vulnerability that could allow open redirect attacks.
2
How do I fix CVE-2015-3880?
To fix CVE-2015-3880, upgrade to phpBB version 3.0.14 or higher, or to version 3.1.4 or higher.
3
What does CVE-2015-3880 affect?
CVE-2015-3880 affects phpBB versions prior to 3.0.14 and 3.1.x prior to 3.1.4.
4
What type of attack does CVE-2015-3880 enable?
CVE-2015-3880 enables attackers to conduct phishing attacks by redirecting users to arbitrary websites.
5
When was CVE-2015-3880 reported?
CVE-2015-3880 was reported in 2015, highlighting vulnerabilities in earlier phpBB versions.