Q: Is CVE-2020-8226 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Q: What products does CVE-2020-8226 affect?

Tracked products affected include phpBB. Check the version you run to see whether it is affected.

Q: How do I fix CVE-2020-8226?

Apply the vendor fix in your normal patch cycle. An official patch or advisory is available. Upgrade affected products to a fixed version.

Question 1

What is CVE-2020-8226?

Accepted Answer

CVE-2020-8226 is a medium-severity software vulnerability (CWE-610) with a CVSS score of 5.8. A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF.

Question 2

Is CVE-2020-8226 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Question 3

What products does CVE-2020-8226 affect?

Accepted Answer

Tracked products affected include phpBB. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2020-8226?

Accepted Answer

Apply the vendor fix in your normal patch cycle. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2020-8226

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information