PT-2019-19938 · Joomla · Harmis Je Messenger

Published 2019-03-29 · Updated 2023-02-01 · CVE-2019-9922

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Harmis JE Messenger component version 1.2.2 for Joomla!

Description An issue allows Directory Traversal, which enables read access to arbitrary files.

Recommendations For Harmis JE Messenger component version 1.2.2, update to a version that fixes this issue, as no specific workaround is provided.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-9922

Affected Products

Harmis Je Messenger

References · 4

• 🔥 https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9922.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9922 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9922 · Vendor Advisory
• https://extensions.joomla.org/extension/je-messenger · Note