Summary: phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.Published: Wednesday, January 15, 2020 - 00:15cvss: 5.0