PT-2019-13940 · Open Source Matters · Joomla!

Sergey Brester · Publicado 2019-08-14 · Atualizado 2020-08-24 · CVE-2019-15028

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.11

Description The issue arises from inadequate checks in the com contact component, which could allow mail submission in forms where it has been disabled.

Recommendations For versions prior to 3.9.11, update to version 3.9.11 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2019-15028

Produtos afetados

Joomla!

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-15028 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-15028 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15028 · Nota
• https://developer.joomla.org/security-centre/789-20190801-core-hardening-com-contact-contact-form · Aviso do Fabricante