| Package | Affected versions | Patched versions |
|---|---|---|
| phpbb/phpbb | ≥ 3.2.8, < 3.2.9 | 3.2.9 |
| phpbb | = 3.2.8 |
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free