CVE-2015-1432

The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the form key, which allows remote attackers to conduct CSRF attacks and change the full folder setting via unspecified vectors.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://github.com/phpbb/phpbb/pull/3311
https://github.com/phpbb/phpbb/commit/23069a13e203985ab124d1139e8de74b12778449
http://www.securityfocus.com/bid/72399
https://wiki.phpbb.com/Release_Highlights/3.0.13
https://tracker.phpbb.com/browse/PHPBB3-13526
http://seclists.org/oss-sec/2015/q1/373
https://security.gentoo.org/glsa/201701-25
https://exchange.xforce.ibmcloud.com/vulnerabilities/100671

Configurations

Configuration 1 (hide)

cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*

Information

Published : 2015-02-10 09:59

Updated : 2017-09-07 18:29

NVD link : CVE-2015-1432

Mitre link : CVE-2015-1432

JSON object : View

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

Products Affected

phpbb

phpbb

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/phpbb/phpbb/pull/3311", "name": "https://github.com/phpbb/phpbb/pull/3311", "tags": [], "refsource": "CONFIRM"}, {"url": "https://github.com/phpbb/phpbb/commit/23069a13e203985ab124d1139e8de74b12778449", "name": "https://github.com/phpbb/phpbb/commit/23069a13e203985ab124d1139e8de74b12778449", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/72399", "name": "72399", "tags": [], "refsource": "BID"}, {"url": "https://wiki.phpbb.com/Release_Highlights/3.0.13", "name": "https://wiki.phpbb.com/Release_Highlights/3.0.13", "tags": [], "refsource": "CONFIRM"}, {"url": "https://tracker.phpbb.com/browse/PHPBB3-13526", "name": "https://tracker.phpbb.com/browse/PHPBB3-13526", "tags": [], "refsource": "CONFIRM"}, {"url": "http://seclists.org/oss-sec/2015/q1/373", "name": "[oss-security] 20150131 Re: CVE request: phpbb3 CSRF and CSS injection", "tags": [], "refsource": "MLIST"}, {"url": "https://security.gentoo.org/glsa/201701-25", "name": "GLSA-201701-25", "tags": [], "refsource": "GENTOO"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100671", "name": "phpbb3-cve20151432-csrf(100671)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the form key, which allows remote attackers to conduct CSRF attacks and change the full folder setting via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-352"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-1432", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2015-02-10T17:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.0.12"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-09-08T01:29Z"}

6.8 /10