2018-10-09 23:29:00 2018-11-26 17:58:08

An issue was discovered in Joomla! before 3.8.13. com_installer actions do not have sufficient CSRF hardening in the backend.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Joomla! 2.5.0 Joomla! 2.5.1 Joomla! 2.5.2 Joomla! 2.5.3 Joomla! 2.5.4 Joomla! 2.5.5 Joomla! 2.5.6 Joomla! 2.5.7 Joomla! 2.5.8 Joomla! 2.5.9 Joomla! 2.5.10 Joomla! 2.5.11 Joomla! 2.5.12 Joomla! 2.5.13 Joomla! 2.5.14 Joomla Joomla! 2.5.15 (not an official CPE) Joomla Joomla! 2.5.16 (not an official CPE) Joomla Joomla! 2.5.17 (not an official CPE) Joomla Joomla! 2.5.18 (not an official CPE) Joomla Joomla! 2.5.19 (not an official CPE) Joomla Joomla! 2.5.20 (not an official CPE) Joomla Joomla! 2.5.21 (not an official CPE) Joomla Joomla! 2.5.22 (not an official CPE) Joomla Joomla! 2.5.23 (not an official CPE) Joomla Joomla! 2.5.24 (not an official CPE) Joomla Joomla! 2.5.25 (not an official CPE) Joomla Joomla! 2.5.26 (not an official CPE) Joomla Joomla! 2.5.27 (not an official CPE) Joomla Joomla! 2.5.28 (not an official CPE) Joomla! 3.0.0 Joomla! 3.0.1 Joomla! 3.0.2 Joomla! 3.0.3 Joomla! 3.0.4 Joomla! 3.1.0 Joomla! 3.1.1 Joomla! 3.1.2 Joomla! 3.1.3 Joomla! 3.1.4 Joomla! 3.1.5 Joomla Joomla! 3.1.6 (not an official CPE) Joomla Joomla! 3.2.0 (not an official CPE) Joomla Joomla! 3.2.1 (not an official CPE) Joomla Joomla! 3.2.2 (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.2.6 (not an official CPE) Joomla Joomla! 3.2.7 (not an official CPE) Joomla Joomla! 3.3.0 (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.4 (not an official CPE) Joomla! 3.3.5 Joomla Joomla! 3.3.6 (not an official CPE) Joomla! 3.4.0 Joomla! 3.4.0 Alpha Joomla! 3.4.0 Beta 1 Joomla! 3.4.0 Beta 2 Joomla! 3.4.0 Beta 3 Joomla! 3.4.0 Release Candidate 1 Joomla! 3.4.1 Joomla! 3.4.1 Release Candidate 1 Joomla! 3.4.1 Release Candidate 2 Joomla! 3.4.2 Release Candidate 1 Joomla Joomla! 3.4.3 (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.4.8 Rc (not an official CPE) Joomla Joomla! 3.5.0 (not an official CPE) Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla Joomla! 3.7.4 (not an official CPE) Joomla Joomla! 3.7.5 (not an official CPE) Joomla Joomla! 3.8.1 (not an official CPE)