CVE-2019-16107

Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...

CVE-2019-16107

phpBB 3.2.7 is vulnerable to Cross-Site Request Forgery (CSRF) due to missing form token validation when deleting post attachments. This CVE-2019-16107 is corroborated by Red Hat, OSV, GHSA, CNVD/NVD, and CVE listings. The available sources describe the issue and affected behavior but do not prov...

CVE-2019-16107

Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...