CVE-2017-1000419: SSRF
Published Jan 2, 2018
·Updated
phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content and potentially attacking such internal services via the web application.
Affected Software
2 affected componentsFixes available
composer/phpbb/phpbb=3.2.0
3.2.1
phpBB phpbb=3.2.0
Event History
Jan 2, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 14, 2022
Advisory Published
via GitHub·03:50 AM
Frequently Asked Questions
1
What is the vulnerability ID for this phpBB vulnerability?
The vulnerability ID for this phpBB vulnerability is CVE-2017-1000419.
2
What is the severity of CVE-2017-1000419?
The severity of CVE-2017-1000419 is high.
3
How does the phpBB vulnerability CVE-2017-1000419 work?
phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function, allowing an attacker to perform port scanning, request internal content, and potentially attack internal services via the web application.
4
Which version of phpBB is affected by CVE-2017-1000419?
phpBB version 3.2.0 is affected by CVE-2017-1000419.
5
How do I fix the phpBB vulnerability CVE-2017-1000419?
To fix the phpBB vulnerability CVE-2017-1000419, upgrade to a patched version of phpBB.