PT-2017-17855 · Joomla+1 · Smart Related Articles+1

Published 2017-04-13 · Updated 2019-10-03 · CVE-2017-7627

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla "Smart related articles" extension version 1.1

Description The issue concerns a missing JEXEC check in the dialog.php file of the "Smart related articles" extension for Joomla, allowing direct requests to this file.

Recommendations For version 1.1 of the "Smart related articles" extension, consider adding a JEXEC check to the dialog.php file to prevent direct requests until a patch is available.

Fix

Related Identifiers

CVE-2017-7627

Affected Products

Joomla!

Smart Related Articles

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-7627 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7627 · Vendor Advisory
• https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f · Patch
• https://extensions.joomla.org/extension/smart-related-articles · Note