PT-2017-17855 · Joomla+1 · Smart Related Articles+1

Publicado 2017-04-13 · Atualizado 2019-10-03 · CVE-2017-7627

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla "Smart related articles" extension version 1.1

Description The issue concerns a missing JEXEC check in the dialog.php file of the "Smart related articles" extension for Joomla, allowing direct requests to this file.

Recommendations For version 1.1 of the "Smart related articles" extension, consider adding a JEXEC check to the dialog.php file to prevent direct requests until a patch is available.

Correção

Identificadores relacionados

CVE-2017-7627

Produtos afetados

Joomla!

Smart Related Articles

Referências · 4

• https://extensions.joomla.org/extension/smart-related-articles · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7627 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7627 · Aviso do Fabricante
• https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f · Correção