diff options
| author | Jochen Neumeister <joneum@FreeBSD.org> | 2026-08-28 21:02:56 +0000 |
|---|---|---|
| committer | Jochen Neumeister <joneum@FreeBSD.org> | 2026-08-28 21:03:41 +0000 |
| commit | 501e44be8f095fb8049a92e109af9935d722c948 (patch) | |
| tree | 4350c8b6d4b850b54bef519401f382737d39fde2 /sysutils/sg3_utils/files/(public-mirror) | |
| parent | 4c4a7135d70c66443837dd6f961453c1f5aa3ed0 (diff) | |
3.3.14 is affected by CVE-2026-29199 (CVSS 8.1): with force_server_vars
disabled, phpBB builds the password reset link from the HTTP Host
header,
so an attacker who can control that header makes reset mails point to a
domain of their choice, which may lead to account takeover.
Also fixed since 3.3.14: improper state verification in the OAuth
implementation (SECURITY-293), IDOR when composing private messages
(SECURITY-286), CSRF on report submission (SECURITY-287), cross-user
notification read state manipulation (SECURITY-290) and HTML generation
from page data (SECURITY-283).
Changelog:
https://github.com/phpbb/phpbb/blob/release-3.3.17/phpBB/docs/CHANGELOG.html
Security: CVE-2026-29199
Security: 4d06b948-a323-11f1-a655-3497f65b111b
MFH: 2026Q3
Sponsored by: Netzkommune GmbH
Diffstat (limited to 'sysutils/sg3_utils/files/(public-mirror)')
0 files changed, 0 insertions, 0 deletions