2019-04-10 21:29:00 2019-04-17 19:18:47

An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Joomla Joomla! 3.9.0 Beta4 (not an official CPE) Joomla Joomla! 3.9.0 Beta3 (not an official CPE) Joomla Joomla! 3.9.0 Beta2 (not an official CPE) Joomla Joomla! 3.9.0 Beta (not an official CPE) Joomla Joomla! 3.9.0 Alpha (not an official CPE) Joomla Joomla! 3.9.0 - (not an official CPE) Joomla Joomla! 3.8.13 (not an official CPE) Joomla Joomla! 3.8.12 Rc (not an official CPE) Joomla Joomla! 3.8.12 (not an official CPE) Joomla Joomla! 3.8.11 Rc (not an official CPE) Joomla Joomla! 3.8.11 (not an official CPE) Joomla Joomla! 3.8.10 (not an official CPE) Joomla Joomla! 3.8.9 Rc (not an official CPE) Joomla Joomla! 3.8.9 (not an official CPE) Joomla Joomla! 3.8.8 Rc (not an official CPE) Joomla Joomla! 3.8.8 (not an official CPE) Joomla Joomla! 3.8.7 Rc (not an official CPE) Joomla Joomla! 3.8.7 (not an official CPE) Joomla Joomla! 3.8.6 Rc1 (not an official CPE) Joomla Joomla! 3.8.6 (not an official CPE) Joomla Joomla! 3.8.5 Rc (not an official CPE) Joomla Joomla! 3.8.5 (not an official CPE) Joomla Joomla! 3.8.4 Rc2 (not an official CPE) Joomla Joomla! 3.8.4 Rc (not an official CPE) Joomla Joomla! 3.8.4 (not an official CPE) Joomla Joomla! 3.8.3 Rc (not an official CPE) Joomla Joomla! 3.8.3 (not an official CPE) Joomla Joomla! 3.8.2 Rc (not an official CPE) Joomla Joomla! 3.8.2 (not an official CPE) Joomla! 1.6 Beta 3 Joomla! 1.6 Beta 4 Joomla! 1.6 Beta 5 Joomla! 1.6 Beta 6 Joomla Joomla! 3.8.1 Rc (not an official CPE) Joomla Joomla! 3.8.1 (not an official CPE) Joomla Joomla! 3.8.0 Rc1 (not an official CPE) Joomla Joomla! 3.8.0 Beta1 (not an official CPE) Joomla Joomla! 3.8.0 - (not an official CPE) Joomla Joomla! 3.7.5 (not an official CPE) Joomla Joomla! 3.7.4 Rc1 (not an official CPE) Joomla Joomla! 3.7.4 Beta1 (not an official CPE) Joomla Joomla! 3.7.4 (not an official CPE) Joomla Joomla! 3.7.3 Rc2 (not an official CPE) Joomla Joomla! 3.7.3 Rc1 (not an official CPE) Joomla Joomla! 3.7.3 Beta1 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.1 Rc2 (not an official CPE) Joomla Joomla! 3.7.1 Rc1 (not an official CPE) Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.7.0 Rc4 (not an official CPE) Joomla Joomla! 3.7.0 Rc3 (not an official CPE) Joomla Joomla! 3.7.0 Rc2 (not an official CPE) Joomla Joomla! 3.7.0 Rc1 (not an official CPE) Joomla Joomla! 3.7.0 Beta4 (not an official CPE) Joomla Joomla! 3.7.0 Beta3 (not an official CPE) Joomla Joomla! 3.7.0 Beta2 (not an official CPE) Joomla Joomla! 3.7.0 Beta1 (not an official CPE) Joomla Joomla! 3.7.0 Alpha2 (not an official CPE) Joomla Joomla! 3.7.0 Alpha1 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.5.1 Rc2 (not an official CPE) Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla Joomla! 3.5.0 (not an official CPE) Joomla Joomla! 3.4.8 Rc (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 3.4.4 Rc2 (not an official CPE) Joomla Joomla! 3.4.4 Rc (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla Joomla! 3.4.3 (not an official CPE) Joomla Joomla! 3.4.2 - (not an official CPE) Joomla! 3.4.2 Release Candidate 1 Joomla! 3.4.1 Release Candidate 2 Joomla! 3.4.1 Release Candidate 1 Joomla! 3.4.1 Joomla! 3.4.0 Release Candidate 1 Joomla! 3.4.0 Beta 2 Joomla! 3.4.0 Beta 3 Joomla! 3.4.0 Beta 1 Joomla! 3.4.0 Alpha Joomla! 3.4.0 Joomla Joomla! 3.3.6 (not an official CPE) Joomla! 3.3.5 Joomla Joomla! 3.3.4 (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.2 Rc (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.1 Rc (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla Joomla! 3.3.0 (not an official CPE) Joomla Joomla! 3.2.7 (not an official CPE) Joomla Joomla! 3.2.6 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.2 Rc (not an official CPE) Joomla Joomla! 3.2.2 (not an official CPE) Joomla Joomla! 3.2.1 Rc (not an official CPE) Joomla Joomla! 3.2.1 (not an official CPE) Joomla Joomla! 3.2.0 Rc (not an official CPE) Joomla Joomla! 3.2.0 Beta2 (not an official CPE) Joomla Joomla! 3.2.0 Beta (not an official CPE) Joomla Joomla! 3.2.0 (not an official CPE) Joomla Joomla! 3.2.0 Alpha (not an official CPE) Joomla! 3.1.5 Joomla Joomla! 3.1.6 (not an official CPE) Joomla! 3.1.4 Joomla! 3.1.3 Joomla! 3.1.2 Joomla! 3.1.1 Joomla Joomla! 3.1.0 Beta5 (not an official CPE) Joomla Joomla! 3.1.0 Beta4 (not an official CPE) Joomla Joomla! 3.1.0 Beta3 (not an official CPE) Joomla Joomla! 3.1.0 Beta2 (not an official CPE) Joomla Joomla! 3.1.0 Beta1 (not an official CPE) Joomla! 3.1.0 Joomla! 3.0.4 Joomla! 3.0.3 Joomla! 3.0.2 Joomla! 3.0.1 Joomla Joomla! 3.0.0 Beta1 (not an official CPE) Joomla Joomla! 3.0.0 Alpha2 (not an official CPE) Joomla Joomla! 3.0.0 Alpha1 (not an official CPE) Joomla! 3.0.0 Joomla Joomla! 2.5.28 Rc2 (not an official CPE) Joomla Joomla! 2.5.28 Rc (not an official CPE) Joomla Joomla! 2.5.28 (not an official CPE) Joomla Joomla! 2.5.27 (not an official CPE) Joomla Joomla! 2.5.26 (not an official CPE) Joomla Joomla! 2.5.25 (not an official CPE) Joomla Joomla! 2.5.24 (not an official CPE) Joomla Joomla! 2.5.23 Rc (not an official CPE) Joomla Joomla! 2.5.23 (not an official CPE) Joomla Joomla! 2.5.22 (not an official CPE) Joomla Joomla! 2.5.21 Rc (not an official CPE) Joomla Joomla! 2.5.21 (not an official CPE) Joomla Joomla! 2.5.20 (not an official CPE) Joomla Joomla! 2.5.19 (not an official CPE) Joomla Joomla! 2.5.18 Rc (not an official CPE) Joomla Joomla! 2.5.18 (not an official CPE) Joomla Joomla! 2.5.17 Rc (not an official CPE) Joomla Joomla! 2.5.17 (not an official CPE) Joomla Joomla! 2.5.16 (not an official CPE) Joomla Joomla! 2.5.15 (not an official CPE) Joomla! 2.5.14 Joomla! 2.5.13 Joomla! 2.5.12 Joomla! 2.5.11 Joomla! 2.5.10 Joomla! 2.5.9 Joomla! 2.5.8 Joomla! 2.5.7 Joomla! 2.5.6 Joomla! 2.5.5 Joomla! 2.5.4 Joomla! 2.5.3 Joomla! 2.5.2 Joomla! 2.5.1 Joomla Joomla! 2.5.0 Rc1 (not an official CPE) Joomla Joomla! 2.5.0 Beta2 (not an official CPE) Joomla Joomla! 2.5.0 Beta1 (not an official CPE) Joomla! 2.5.0 Joomla! 1.7.5 Joomla! 1.7.4 Joomla! 1.7.3 Joomla! 1.7.2 Joomla! 1.7.1 Joomla! 1.7.0 Joomla! 1.6.6 Joomla! 1.6.5 Joomla! 1.6.4 Joomla Joomla! 1.6.2 (not an official CPE) Joomla! 1.6.3 Joomla! 1.6.1 Joomla! 1.6.0 Joomla! 1.6 Release Candidate 1 Joomla! 1.6 Beta 9 Joomla! 1.6 Beta 8 Joomla! 1.6 Beta 15 Joomla! 1.6 Beta 7 Joomla! 1.6 Beta 2 Joomla! 1.6 Beta 14 Joomla! 1.6 Beta 13 Joomla! 1.6 Beta 12 Joomla! 1.6 Beta 11 Joomla! 1.6 Beta10 Joomla! 1.6 Beta 1 Joomla! 1.6 Alpha 2 Joomla! 1.6 Alpha Joomla! 1.5.26 Joomla! 1.5.25 Joomla! 1.5.24 Joomla! 1.5.23 Joomla! 1.5.22 Joomla! 1.5.21 Joomla! 1.5.20 Joomla! 1.5.19 Joomla! 1.5.18 Joomla! 1.5.17 Joomla! 1.5.16 Joomla! 1.5.15:rc Joomla! 1.5.15 Joomla! 1.5.14 Joomla! 1.5.13 Joomla! 1.5.12 Joomla! 1.5.11 Joomla! 1.5.10 Joomla! 1.5.9 Joomla! 1.5.8 Joomla! 1.5.7 Joomla! 1.5.6 Joomla! 1.5.5 Joomla! 1.5.4 Joomla! 1.5.3 Joomla! 1.5.2 Joomla! 1.5.1 Joomla! 1.5.0 Joomla Joomla! 3.9.0 Rc (not an official CPE) Joomla Joomla! 3.9.0 Rc2 (not an official CPE) Joomla Joomla! 3.9.1 - (not an official CPE) Joomla Joomla! 3.9.1 Rc (not an official CPE) Joomla Joomla! 3.9.2 - (not an official CPE) Joomla Joomla! 3.9.2 Rc (not an official CPE) Joomla Joomla! 3.9.4 (not an official CPE)