PT-2019-8768 · Joomla · Fabrik

Danilo Cianciulli + 1 · Publicado 2019-10-29 · Atualizado 2019-10-31 · CVE-2018-10727

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fabrik component versions prior to 3.8.1

Description The issue concerns a Reflected Cross-Site Scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script via the HTTP Referer header, specifically targeting the fabrik referrer hidden field in the Fabrik component for Joomla!.

Recommendations For versions prior to 3.8.1, update to version 3.8.1 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-10727

Produtos afetados

Fabrik

Referências · 3

• 🔥 https://github.com/Fabrik/fabrik/issues/2033 · Exploit
• https://osv.dev/vulnerability/CVE-2018-10727 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10727 · Nota de Segurança