Lucene search

K
osvGoogleOSV:CVE-2018-17856
HistoryOct 09, 2018 - 9:29 p.m.

CVE-2018-17856

2018-10-0921:29:00
Google
osv.dev
6

AI Score

7.3

Confidence

High

EPSS

0.003

Percentile

72.0%

An issue was discovered in Joomla! before 3.8.13. com_joomlaupdate allows the execution of arbitrary code. The default ACL config enabled the ability of Administrator-level users to access com_joomlaupdate and trigger code execution.

AI Score

7.3

Confidence

High

EPSS

0.003

Percentile

72.0%