CVE-2020-5502

phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships...