PT-2021-15387 · Joomla · Joomla!

Hoang Kien · Published 2021-03-04 · Updated 2025-04-03 · CVE-2021-23132

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.0.0 through 3.9.24

Description An issue was discovered in the com media component, which allowed paths that are not intended for image uploads.

Recommendations For Joomla! versions 3.0.0 through 3.9.24, consider restricting access to the com media component until a fix is available. As a temporary workaround, avoid using com media for image uploads to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

BIT-JOOMLA-2021-23132

CVE-2021-23132

Affected Products

Joomla!

References · 7

• 🔥 https://github.com/HoangKien1020/CVE-2021-23132 · Exploit
• https://osv.dev/vulnerability/BIT-joomla-2021-23132 · Vendor Advisory
• https://developer.joomla.org/security-centre/846-20210306-core-com-media-allowed-paths-that-are-not-intended-for-image-uploads.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-23132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23132 · Security Note
• https://t.me/cybersecuritytechnologies/2846 · Telegram Post
• https://t.me/cybersecuritytechnologies/2865 · Telegram Post