2019-02-12 19:29:00 2019-02-13 22:48:02

An issue was discovered in Joomla! before 3.9.3. A combination of specific web server configurations, in connection with specific file types and browser-side MIME-type sniffing, causes an XSS attack vector.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Joomla Joomla! 1.0.0 (not an official CPE) Joomla Joomla! 1.0.1 (not an official CPE) Joomla Joomla! 1.0.2 (not an official CPE) Joomla Joomla! 1.0.3 (not an official CPE) Joomla Joomla! 1.0.4 (not an official CPE) Joomla Joomla! 1.0.5 (not an official CPE) Joomla Joomla! 1.0.6 (not an official CPE) Joomla Joomla! 1.0.7 (not an official CPE) Joomla Joomla! 1.0.8 (not an official CPE) Joomla Joomla! 1.0.9 (not an official CPE) Joomla Joomla! 1.0.10 (not an official CPE) Joomla Joomla! 1.0.11 (not an official CPE) Joomla Joomla! 1.0.12 (not an official CPE) Joomla Joomla! 1.0.13 (not an official CPE) Joomla Joomla! 1.0.14 (not an official CPE) Joomla Joomla! 1.0.15 (not an official CPE) Joomla! 1.5.0 Joomla! 1.5.1 Joomla! 1.5.2 Joomla! 1.5.3 Joomla! 1.5.4 Joomla! 1.5.5 Joomla! 1.5.6 Joomla! 1.5.7 Joomla! 1.5.8 Joomla! 1.5.9 Joomla! 1.5.10 Joomla! 1.5.11 Joomla! 1.5.12 Joomla! 1.5.13 Joomla! 1.5.14 Joomla! 1.5.15 Joomla! 1.5.15:rc Joomla! 1.5.16 Joomla! 1.5.17 Joomla! 1.5.18 Joomla! 1.5.19 Joomla! 1.5.20 Joomla! 1.5.21 Joomla! 1.5.22 Joomla! 1.5.23 Joomla! 1.5.24 Joomla! 1.5.25 Joomla! 1.5.26 Joomla! 1.6 Alpha Joomla! 1.6 Alpha 2 Joomla! 1.6 Beta 1 Joomla! 1.6 Beta10 Joomla! 1.6 Beta 11 Joomla! 1.6 Beta 12 Joomla! 1.6 Beta 13 Joomla! 1.6 Beta 14 Joomla! 1.6 Beta 15 Joomla! 1.6 Beta 2 Joomla! 1.6 Beta 3 Joomla! 1.6 Beta 4 Joomla! 1.6 Beta 5 Joomla! 1.6 Beta 6 Joomla! 1.6 Beta 7 Joomla! 1.6 Beta 8 Joomla! 1.6 Beta 9 Joomla! 1.6 Release Candidate 1 Joomla! 1.6.0 Joomla! 1.6.1 Joomla Joomla! 1.6.2 (not an official CPE) Joomla! 1.6.3 Joomla! 1.6.4 Joomla! 1.6.5 Joomla! 1.6.6 Joomla! 1.7.0 Joomla! 1.7.1 Joomla! 1.7.2 Joomla! 1.7.3 Joomla! 1.7.4 Joomla! 1.7.5 Joomla! 2.5.0 Joomla Joomla! 2.5.0 Beta1 (not an official CPE) Joomla Joomla! 2.5.0 Beta2 (not an official CPE) Joomla Joomla! 2.5.0 Rc1 (not an official CPE) Joomla! 2.5.1 Joomla! 2.5.2 Joomla! 2.5.3 Joomla! 2.5.4 Joomla! 2.5.5 Joomla! 2.5.6 Joomla! 2.5.7 Joomla! 2.5.8 Joomla! 2.5.9 Joomla! 2.5.10 Joomla! 2.5.11 Joomla! 2.5.12 Joomla! 2.5.13 Joomla! 2.5.14 Joomla Joomla! 2.5.15 (not an official CPE) Joomla Joomla! 2.5.16 (not an official CPE) Joomla Joomla! 2.5.17 (not an official CPE) Joomla Joomla! 2.5.17 Rc (not an official CPE) Joomla Joomla! 2.5.18 (not an official CPE) Joomla Joomla! 2.5.18 Rc (not an official CPE) Joomla Joomla! 2.5.19 (not an official CPE) Joomla Joomla! 2.5.20 (not an official CPE) Joomla Joomla! 2.5.21 (not an official CPE) Joomla Joomla! 2.5.21 Rc (not an official CPE) Joomla Joomla! 2.5.22 (not an official CPE) Joomla Joomla! 2.5.23 (not an official CPE) Joomla Joomla! 2.5.23 Rc (not an official CPE) Joomla Joomla! 2.5.24 (not an official CPE) Joomla Joomla! 2.5.25 (not an official CPE) Joomla Joomla! 2.5.26 (not an official CPE) Joomla Joomla! 2.5.27 (not an official CPE) Joomla Joomla! 2.5.28 (not an official CPE) Joomla Joomla! 2.5.28 Rc (not an official CPE) Joomla Joomla! 2.5.28 Rc2 (not an official CPE) Joomla! 3.0.0 Joomla Joomla! 3.0.0 Alpha1 (not an official CPE) Joomla Joomla! 3.0.0 Alpha2 (not an official CPE) Joomla Joomla! 3.0.0 Beta1 (not an official CPE) Joomla! 3.0.1 Joomla! 3.0.2 Joomla! 3.0.3 Joomla! 3.0.4 Joomla! 3.1.0 Joomla Joomla! 3.1.0 Beta1 (not an official CPE) Joomla Joomla! 3.1.0 Beta2 (not an official CPE) Joomla Joomla! 3.1.0 Beta3 (not an official CPE) Joomla Joomla! 3.1.0 Beta4 (not an official CPE) Joomla Joomla! 3.1.0 Beta5 (not an official CPE) Joomla! 3.1.1 Joomla! 3.1.2 Joomla! 3.1.3 Joomla! 3.1.4 Joomla! 3.1.5 Joomla Joomla! 3.1.6 (not an official CPE) Joomla Joomla! 3.2.0 (not an official CPE) Joomla Joomla! 3.2.0 Alpha (not an official CPE) Joomla Joomla! 3.2.0 Beta (not an official CPE) Joomla Joomla! 3.2.0 Beta2 (not an official CPE) Joomla Joomla! 3.2.0 Rc (not an official CPE) Joomla Joomla! 3.2.1 (not an official CPE) Joomla Joomla! 3.2.1 Rc (not an official CPE) Joomla Joomla! 3.2.2 (not an official CPE) Joomla Joomla! 3.2.2 Rc (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.2.6 (not an official CPE) Joomla Joomla! 3.2.7 (not an official CPE) Joomla Joomla! 3.3.0 (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla Joomla! 3.3.1 Rc (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.2 Rc (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.4 (not an official CPE) Joomla! 3.3.5 Joomla Joomla! 3.3.6 (not an official CPE) Joomla! 3.4.0 Joomla! 3.4.0 Alpha Joomla! 3.4.0 Beta 1 Joomla! 3.4.0 Beta 2 Joomla! 3.4.0 Beta 3 Joomla! 3.4.0 Release Candidate 1 Joomla! 3.4.1 Joomla! 3.4.1 Release Candidate 1 Joomla! 3.4.1 Release Candidate 2 Joomla Joomla! 3.4.2 - (not an official CPE) Joomla! 3.4.2 Release Candidate 1 Joomla Joomla! 3.4.3 (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla Joomla! 3.4.4 Rc (not an official CPE) Joomla Joomla! 3.4.4 Rc2 (not an official CPE) Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.4.8 Rc (not an official CPE) Joomla Joomla! 3.5.0 (not an official CPE) Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 3.5.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla Joomla! 3.7.0 Alpha1 (not an official CPE) Joomla Joomla! 3.7.0 Alpha2 (not an official CPE) Joomla Joomla! 3.7.0 Beta1 (not an official CPE) Joomla Joomla! 3.7.0 Beta2 (not an official CPE) Joomla Joomla! 3.7.0 Beta3 (not an official CPE) Joomla Joomla! 3.7.0 Beta4 (not an official CPE) Joomla Joomla! 3.7.0 Rc1 (not an official CPE) Joomla Joomla! 3.7.0 Rc2 (not an official CPE) Joomla Joomla! 3.7.0 Rc3 (not an official CPE) Joomla Joomla! 3.7.0 Rc4 (not an official CPE) Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.7.1 Rc1 (not an official CPE) Joomla Joomla! 3.7.1 Rc2 (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla Joomla! 3.7.3 Beta1 (not an official CPE) Joomla Joomla! 3.7.3 Rc1 (not an official CPE) Joomla Joomla! 3.7.3 Rc2 (not an official CPE) Joomla Joomla! 3.7.4 (not an official CPE) Joomla Joomla! 3.7.4 Beta1 (not an official CPE) Joomla Joomla! 3.7.4 Rc1 (not an official CPE) Joomla Joomla! 3.7.5 (not an official CPE) Joomla Joomla! 3.8.0 - (not an official CPE) Joomla Joomla! 3.8.0 Beta1 (not an official CPE) Joomla Joomla! 3.8.0 Rc1 (not an official CPE) Joomla Joomla! 3.8.1 (not an official CPE) Joomla Joomla! 3.8.1 Rc (not an official CPE) Joomla Joomla! 3.8.2 (not an official CPE) Joomla Joomla! 3.8.2 Rc (not an official CPE) Joomla Joomla! 3.8.3 (not an official CPE) Joomla Joomla! 3.8.3 Rc (not an official CPE) Joomla Joomla! 3.8.4 (not an official CPE) Joomla Joomla! 3.8.4 Rc (not an official CPE) Joomla Joomla! 3.8.4 Rc2 (not an official CPE) Joomla Joomla! 3.8.5 (not an official CPE) Joomla Joomla! 3.8.5 Rc (not an official CPE) Joomla Joomla! 3.8.6 (not an official CPE) Joomla Joomla! 3.8.6 Rc1 (not an official CPE) Joomla Joomla! 3.8.7 (not an official CPE) Joomla Joomla! 3.8.7 Rc (not an official CPE) Joomla Joomla! 3.8.8 (not an official CPE) Joomla Joomla! 3.8.8 Rc (not an official CPE) Joomla Joomla! 3.8.9 (not an official CPE) Joomla Joomla! 3.8.9 Rc (not an official CPE) Joomla Joomla! 3.8.10 (not an official CPE) Joomla Joomla! 3.8.11 (not an official CPE) Joomla Joomla! 3.8.11 Rc (not an official CPE) Joomla Joomla! 3.8.12 (not an official CPE) Joomla Joomla! 3.8.12 Rc (not an official CPE) Joomla Joomla! 3.8.13 (not an official CPE) Joomla Joomla! 3.9.0 - (not an official CPE) Joomla Joomla! 3.9.0 Alpha (not an official CPE) Joomla Joomla! 3.9.0 Beta (not an official CPE) Joomla Joomla! 3.9.0 Beta2 (not an official CPE) Joomla Joomla! 3.9.0 Beta3 (not an official CPE) Joomla Joomla! 3.9.0 Beta4 (not an official CPE) Joomla Joomla! 3.9.0 Rc (not an official CPE) Joomla Joomla! 3.9.0 Rc2 (not an official CPE) Joomla Joomla! 3.9.1 - (not an official CPE) Joomla Joomla! 3.9.1 Rc (not an official CPE) Joomla Joomla! 3.9.2 - (not an official CPE) Joomla Joomla! 3.9.2 Rc (not an official CPE)