PT-2018-18020 · Joomla · Joomla! Proclaim

Ihsan Sencan · Publicado 2018-02-22 · Atualizado 2018-03-13 · CVE-2018-7316

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Joomla! Proclaim version 9.1.1

Description The issue allows for an Arbitrary File Upload in the Proclaim component for Joomla!. This is achieved via a mediafileform action.

Recommendations For Joomla! Proclaim version 9.1.1, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the mediafileform action to minimize the risk of exploitation.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-7316

Produtos afetados

Joomla! Proclaim

Referências · 3

• 🔥 https://exploit-db.com/exploits/44164 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7316 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7316 · Aviso do Fabricante