Lucene search

PRIOn knowledge basePRION:CVE-2018-6378

HistoryMay 22, 2018 - 3:29 p.m.

Design/Logic Flaw

2018-05-2215:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.035 Low

EPSS

Percentile

91.3%

JSON

In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager.

CPENameOperatorVersion
joomla\\!lt3.8.8

CPE	Name	Operator	Version
	joomla\\!	lt	3.8.8

References

www.securityfocus.com/bid/104268

www.securitytracker.com/id/1040966

developer.joomla.org/security-centre/737-20180509-core-xss-vulnerability-in-the-media-manager.html

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.035 Low

EPSS

Percentile

91.3%

JSON

Related for PRION:CVE-2018-6378