Joomla! Security News

1. [20191002] - Core - Path Disclosure in phpuft8 mapping files

   • Project: Joomla!
   • SubProject: CMS
   • Impact: Low
   • Severity: Low
   • Versions: 3.6.0 - 3.9.12
   • Exploit type: Path Disclosure
   • Reported Date: 2019-November-01
   • Fixed Date: 2019-November-05
   • CVE Number: CVE-2019-18674

   Description

   Missing access check in the phputf8 mapping files could lead to an path disclosure.

   Affected Installs

   Joomla! CMS versions 3.6.0 - 3.9.12

   Solution

   Upgrade to version 3.9.13

   Contact

   The JSST at the Joomla! Security Centre.

   Reported By: Phil Taylor

   

   

2. [20191001] - Core - CSRF in com_template overrides view

   • Project: Joomla!
   • SubProject: CMS
   • Impact: High
   • Severity: Low
   • Versions: 3.2.0-3.9.12
   • Exploit type: CSRF
   • Reported Date: 2019-October-10
   • Fixed Date: 2019-November-05
   • CVE Number: CVE-2019-18650

   Description

   A missing token check in com_template causes a CSRF vulnerability.

   Affected Installs

   Joomla! CMS versions 3.2.0 - 3.9.12

   Solution

   Upgrade to version 3.9.13

   Contact

   The JSST at the Joomla! Security Centre.

   Reported By:Lee Thao from Viettel Cyber Security

   

   

3. [20190901] - Core - XSS in logo parameter of default templates

   • Project: Joomla!
   • SubProject: CMS
   • Impact: Moderate
   • Severity: Low
   • Versions: 3.0.0-3.9.11
   • Exploit type: XSS
   • Reported Date: 2019-August-28
   • Fixed Date: 2019-September-24
   • CVE Number: CVE-2019-16725

   Description

   Inadequate escaping allowed XSS attacks using the logo parameter of the default templates.

   Affected Installs

   Joomla! CMS versions 3.0.0 - 3.9.11

   Solution

   Upgrade to version 3.9.12

   Contact

   The JSST at the Joomla! Security Centre.

   Reported By:Aswin M Guptha

   

   

4. [20190801] - Core - Hardening com_contact contact form

   • Project: Joomla!
   • SubProject: CMS
   • Impact: Moderate
   • Severity: Low
   • Versions: 1.6.2 - 3.9.10
   • Exploit type: Incorrect Access Control
   • Reported Date: 2019-April-09
   • Fixed Date: 2019-August-13
   • CVE Number: CVE-2019-15028

   Description

   Inadequate checks in com_contact could allowed mail submission in disabled forms.

   Affected Installs

   Joomla! CMS versions 1.6.2 - 3.9.10

   Solution

   Upgrade to version 3.9.11

   Contact

   The JSST at the Joomla! Security Centre.

   Reported By:Sergey Brester

   

   

5. [20190701] - Core - Filter attribute in subform fields allows remote code execution

   • Project: Joomla!
   • SubProject: CMS
   • Impact: Moderate
   • Severity: Low
   • Versions: 3.9.7 - 3.9.8
   • Exploit type: Remote Code Execution
   • Reported Date: 2019-June-20
   • Fixed Date: 2019-July-09
   • CVE Number: CVE-2019-14654

   Description

   Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option.

   Affected Installs

   Joomla! CMS versions 3.9.7 - 3.9.8

   Solution

   Upgrade to version 3.9.9

   Contact

   The JSST at the Joomla! Security Centre.

   Reported By:Benjamin Trenkle, JSST