PT-2020-7145 · Joomla · Joomla! Com Mailto

Henri Salo · Published 2020-02-04 · Updated 2020-02-05 · CVE-2011-4912

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! com mailto versions 1.5.x through 1.5.13

Description The issue allows for an automated mail timeout bypass.

Recommendations For versions 1.5.x through 1.5.13, update to a version that contains a fix for this issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2011-4912

Affected Products

Joomla! Com Mailto

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4912 · Security Note
• https://developer.joomla.org/security/news/303-20090723-core-com-mailto-timeout-issue.html · Vendor Advisory
• https://openwall.com/lists/oss-security/2011/12/25/9 · Note