PT-2020-13531 · Joomla · Xcloner

Published 2020-05-23 · Updated 2021-07-21 · CVE-2020-13424

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions XCloner component for Joomla! versions prior to 3.5.4

Description The issue allows authenticated local file disclosure. This means that an authenticated attacker could potentially access or disclose local files on the system.

Recommendations For versions prior to 3.5.4, update to version 3.5.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-13424

Affected Products

Xcloner

References · 4

• https://osv.dev/vulnerability/CVE-2020-13424 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13424 · Security Note
• https://xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version · Vendor Advisory
• https://t.me/cvenotify/4031 · Telegram Post