Lucene search

K
freebsdFreeBSDEC2D1CFD-7AC5-11E5-B35A-002590263BF5
HistoryJun 30, 2015 - 12:00 a.m.

Joomla! -- Core - CSRF Protection vulnerabilities

2015-06-3000:00:00
vuxml.freebsd.org
12

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

59.2%

The JSST and the Joomla! Security Center report:

[20150602] - Core - CSRF Protection
Lack of CSRF checks potentially enabled uploading malicious code.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjoomla3= 3.2.0UNKNOWN
FreeBSDanynoarchjoomla3< 3.4.2UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

59.2%

Related for EC2D1CFD-7AC5-11E5-B35A-002590263BF5