PT-2021-15386 · Joomla · Joomla!

Bui Duc Anh Khoa · Published 2021-03-04 · Updated 2025-04-03 · CVE-2021-23131

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.2.0 through 3.9.24

Description An issue was discovered in the template manager due to missing input validation.

Recommendations For versions 3.2.0 through 3.9.24, update to a version that includes input validation in the template manager.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BIT-JOOMLA-2021-23131

CVE-2021-23131

Affected Products

Joomla!

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-23131 · Security Note
• https://developer.joomla.org/security-centre/845-20210305-core-input-validation-within-the-template-manager.html · Vendor Advisory
• https://osv.dev/vulnerability/BIT-joomla-2021-23131 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-23131 · Vendor Advisory
• https://t.me/cvenotify/10882 · Telegram Post