2019-06-11 21:29:00 2019-06-12 17:29:00

An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be manipulated by non Super-Admin users.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Joomla Joomla! 3.7.1 Rc2 (not an official CPE) Joomla Joomla! 3.7.1 Rc1 (not an official CPE) Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.7.0 Rc4 (not an official CPE) Joomla Joomla! 3.7.0 Rc3 (not an official CPE) Joomla Joomla! 3.7.0 Rc2 (not an official CPE) Joomla Joomla! 3.7.0 Rc1 (not an official CPE) Joomla Joomla! 3.7.0 Beta4 (not an official CPE) Joomla Joomla! 3.7.0 Beta3 (not an official CPE) Joomla Joomla! 3.7.0 Beta2 (not an official CPE) Joomla Joomla! 3.7.0 Beta1 (not an official CPE) Joomla Joomla! 3.7.0 Alpha2 (not an official CPE) Joomla Joomla! 3.7.0 Alpha1 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.5.1 Rc2 (not an official CPE) Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla Joomla! 3.5.0 (not an official CPE) Joomla Joomla! 3.4.8 Rc (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 3.4.4 Rc2 (not an official CPE) Joomla Joomla! 3.4.4 Rc (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla Joomla! 3.4.3 (not an official CPE) Joomla! 3.4.2 Release Candidate 1 Joomla Joomla! 3.4.2 - (not an official CPE) Joomla! 3.4.1 Release Candidate 2 Joomla! 3.4.1 Release Candidate 1 Joomla! 3.4.1 Joomla! 3.4.0 Release Candidate 1 Joomla! 3.4.0 Beta 3 Joomla! 3.4.0 Beta 2 Joomla! 3.4.0 Beta 1 Joomla! 3.4.0 Alpha Joomla! 3.4.0 Joomla Joomla! 3.3.6 (not an official CPE) Joomla! 3.3.5 Joomla Joomla! 3.3.4 (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.2 Rc (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.1 Rc (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla Joomla! 3.3.0 (not an official CPE) Joomla Joomla! 3.2.7 (not an official CPE) Joomla Joomla! 3.2.6 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.2 Rc (not an official CPE) Joomla Joomla! 3.2.2 (not an official CPE) Joomla Joomla! 3.2.1 Rc (not an official CPE) Joomla Joomla! 3.2.1 (not an official CPE) Joomla Joomla! 3.2.0 Rc (not an official CPE) Joomla Joomla! 3.2.0 Beta2 (not an official CPE) Joomla Joomla! 3.2.0 Beta (not an official CPE) Joomla Joomla! 3.2.0 Alpha (not an official CPE) Joomla Joomla! 3.2.0 (not an official CPE) Joomla Joomla! 3.1.6 (not an official CPE) Joomla! 3.1.5 Joomla! 3.1.4 Joomla! 3.1.3 Joomla! 3.1.2 Joomla! 3.1.1 Joomla Joomla! 3.1.0 Beta5 (not an official CPE) Joomla Joomla! 3.1.0 Beta4 (not an official CPE) Joomla Joomla! 3.1.0 Beta3 (not an official CPE) Joomla Joomla! 3.1.0 Beta2 (not an official CPE) Joomla Joomla! 3.1.0 Beta1 (not an official CPE) Joomla! 3.1.0 Joomla! 3.0.4 Joomla! 3.0.3 Joomla! 3.0.2 Joomla! 3.0.1 Joomla Joomla! 3.0.0 Beta1 (not an official CPE) Joomla Joomla! 3.0.0 Alpha2 (not an official CPE) Joomla Joomla! 3.0.0 Alpha1 (not an official CPE) Joomla! 3.0.0 Joomla Joomla! 2.5.28 Rc2 (not an official CPE) Joomla Joomla! 2.5.28 Rc (not an official CPE) Joomla Joomla! 2.5.28 (not an official CPE) Joomla Joomla! 2.5.27 (not an official CPE) Joomla Joomla! 2.5.26 (not an official CPE) Joomla Joomla! 2.5.25 (not an official CPE) Joomla Joomla! 2.5.24 (not an official CPE) Joomla Joomla! 2.5.23 Rc (not an official CPE) Joomla Joomla! 2.5.23 (not an official CPE) Joomla Joomla! 2.5.22 (not an official CPE) Joomla Joomla! 2.5.21 Rc (not an official CPE) Joomla Joomla! 2.5.21 (not an official CPE) Joomla Joomla! 2.5.20 (not an official CPE) Joomla Joomla! 2.5.19 (not an official CPE) Joomla Joomla! 2.5.18 Rc (not an official CPE) Joomla Joomla! 2.5.18 (not an official CPE) Joomla Joomla! 2.5.17 Rc (not an official CPE) Joomla Joomla! 2.5.17 (not an official CPE) Joomla Joomla! 2.5.16 (not an official CPE) Joomla Joomla! 2.5.15 (not an official CPE) Joomla! 2.5.14 Joomla! 2.5.13 Joomla! 2.5.12 Joomla! 2.5.11 Joomla! 2.5.10 Joomla! 2.5.9 Joomla! 2.5.8 Joomla! 2.5.7 Joomla! 2.5.6 Joomla! 2.5.5 Joomla! 2.5.4 Joomla! 2.5.3 Joomla! 2.5.2 Joomla! 2.5.1 Joomla Joomla! 2.5.0 Rc1 (not an official CPE) Joomla Joomla! 2.5.0 Beta2 (not an official CPE) Joomla Joomla! 2.5.0 Beta1 (not an official CPE) Joomla! 2.5.0 Joomla! 1.7.5 Joomla! 1.7.4 Joomla! 1.7.3 Joomla! 1.7.2 Joomla! 1.7.1 Joomla! 1.7.0 Joomla! 1.6.6 Joomla! 1.6.5 Joomla! 1.6.4 Joomla! 1.6.3 Joomla Joomla! 1.6.2 (not an official CPE) Joomla! 1.6.1 Joomla! 1.6.0 Joomla! 1.6 Release Candidate 1 Joomla! 1.6 Beta 9 Joomla! 1.6 Beta 8 Joomla! 1.6 Beta 7 Joomla! 1.6 Beta 6 Joomla! 1.6 Beta 5 Joomla! 1.6 Beta 4 Joomla! 1.6 Beta 3 Joomla! 1.6 Beta 2 Joomla! 1.6 Beta 15 Joomla! 1.6 Beta 14 Joomla! 1.6 Beta 13 Joomla! 1.6 Beta 12 Joomla! 1.6 Beta 11 Joomla! 1.6 Beta10 Joomla! 1.6 Beta 1 Joomla! 1.6 Alpha 2 Joomla! 1.6 Alpha Joomla! 1.5.26 Joomla! 1.5.25 Joomla! 1.5.24 Joomla! 1.5.23 Joomla! 1.5.22 Joomla! 1.5.21 Joomla! 1.5.20 Joomla! 1.5.19 Joomla! 1.5.18 Joomla! 1.5.17 Joomla! 1.5.16 Joomla! 1.5.15:rc Joomla! 1.5.15 Joomla! 1.5.14 Joomla! 1.5.13 Joomla! 1.5.12 Joomla! 1.5.11 Joomla! 1.5.10 Joomla! 1.5.9 Joomla! 1.5.8 Joomla! 1.5.7 Joomla! 1.5.6 Joomla! 1.5.5 Joomla! 1.5.4 Joomla! 1.5.3 Joomla! 1.5.2 Joomla! 1.5.1 Joomla! 1.5.0 Joomla Joomla! 1.0.15 (not an official CPE) Joomla Joomla! 1.0.14 (not an official CPE) Joomla Joomla! 1.0.13 (not an official CPE) Joomla Joomla! 1.0.12 (not an official CPE) Joomla Joomla! 1.0.11 (not an official CPE) Joomla Joomla! 1.0.10 (not an official CPE) Joomla Joomla! 1.0.9 (not an official CPE) Joomla Joomla! 1.0.8 (not an official CPE) Joomla Joomla! 1.0.7 (not an official CPE) Joomla Joomla! 1.0.6 (not an official CPE) Joomla Joomla! 1.0.5 (not an official CPE) Joomla Joomla! 1.0.4 (not an official CPE) Joomla Joomla! 1.0.3 (not an official CPE) Joomla Joomla! 1.0.2 (not an official CPE) Joomla Joomla! 1.0.1 (not an official CPE) Joomla Joomla! 1.0.0 (not an official CPE) Joomla Joomla! - (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla Joomla! 3.7.3 Beta1 (not an official CPE) Joomla Joomla! 3.7.3 Rc1 (not an official CPE) Joomla Joomla! 3.7.3 Rc2 (not an official CPE) Joomla Joomla! 3.7.4 (not an official CPE) Joomla Joomla! 3.7.4 Beta1 (not an official CPE) Joomla Joomla! 3.7.4 Rc1 (not an official CPE) Joomla Joomla! 3.7.5 (not an official CPE) Joomla Joomla! 3.8.0 - (not an official CPE) Joomla Joomla! 3.8.0 Beta1 (not an official CPE) Joomla Joomla! 3.8.0 Rc1 (not an official CPE) Joomla Joomla! 3.8.1 (not an official CPE) Joomla Joomla! 3.8.1 Rc (not an official CPE) Joomla Joomla! 3.8.2 (not an official CPE) Joomla Joomla! 3.8.2 - (not an official CPE) Joomla Joomla! 3.8.2 Rc (not an official CPE) Joomla Joomla! 3.8.3 (not an official CPE) Joomla Joomla! 3.8.3 - (not an official CPE) Joomla Joomla! 3.8.3 Rc (not an official CPE) Joomla Joomla! 3.8.4 (not an official CPE) Joomla Joomla! 3.8.4 - (not an official CPE) Joomla Joomla! 3.8.4 Rc (not an official CPE) Joomla Joomla! 3.8.4 Rc2 (not an official CPE) Joomla Joomla! 3.8.5 (not an official CPE) Joomla Joomla! 3.8.5 - (not an official CPE) Joomla Joomla! 3.8.5 Rc (not an official CPE) Joomla Joomla! 3.8.6 (not an official CPE) Joomla Joomla! 3.8.6 - (not an official CPE) Joomla Joomla! 3.8.6 Rc1 (not an official CPE) Joomla Joomla! 3.8.7 (not an official CPE) Joomla Joomla! 3.8.7 - (not an official CPE) Joomla Joomla! 3.8.7 Rc (not an official CPE) Joomla Joomla! 3.8.8 (not an official CPE) Joomla Joomla! 3.8.8 - (not an official CPE) Joomla Joomla! 3.8.8 Rc (not an official CPE) Joomla Joomla! 3.8.9 (not an official CPE) Joomla Joomla! 3.8.9 - (not an official CPE) Joomla Joomla! 3.8.9 Rc (not an official CPE) Joomla Joomla! 3.8.10 (not an official CPE) Joomla Joomla! 3.8.11 (not an official CPE) Joomla Joomla! 3.8.11 - (not an official CPE) Joomla Joomla! 3.8.11 Rc (not an official CPE) Joomla Joomla! 3.8.12 (not an official CPE) Joomla Joomla! 3.8.12 - (not an official CPE) Joomla Joomla! 3.8.12 Rc (not an official CPE) Joomla Joomla! 3.8.13 (not an official CPE) Joomla Joomla! 3.9.0 - (not an official CPE) Joomla Joomla! 3.9.0 Alpha (not an official CPE) Joomla Joomla! 3.9.0 Beta (not an official CPE) Joomla Joomla! 3.9.0 Beta2 (not an official CPE) Joomla Joomla! 3.9.0 Beta3 (not an official CPE) Joomla Joomla! 3.9.0 Beta4 (not an official CPE) Joomla Joomla! 3.9.0 Rc (not an official CPE) Joomla Joomla! 3.9.0 Rc2 (not an official CPE) Joomla Joomla! 3.9.1 - (not an official CPE) Joomla Joomla! 3.9.1 Rc (not an official CPE) Joomla Joomla! 3.9.2 - (not an official CPE) Joomla Joomla! 3.9.2 Rc (not an official CPE) Joomla Joomla! 3.9.3 Rc1 (not an official CPE) Joomla Joomla! 3.9.4 (not an official CPE) Joomla Joomla! 3.9.4 Rc1 (not an official CPE) Joomla Joomla! 3.9.5 Rc1 (not an official CPE) Joomla Joomla! 3.9.6 - (not an official CPE) Joomla Joomla! 3.9.6 Rc1 (not an official CPE) Joomla Joomla! 3.9.6 Rc2 (not an official CPE)