Cross site request forgery (csrf)

2020-07-1516:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install endpoint of com_installer causes a CSRF vulnerability.

CPENameOperatorVersion
joomla\\!ge3.7.0
joomla\\!le3.9.19

CPE	Name	Operator	Version
	joomla\\!	ge	3.7.0
	joomla\\!	le	3.9.19

References

developer.joomla.org/security-centre/818-20200701-core-csrf-in-com-installer-ajax-install-endpoint.html