CVE-2020-8420

An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

CVE-2020-8420

CVE-2020-8420 affects Joomla! up to version 3.9.14 (before 3.9.15). The issue is a CSRF vulnerability caused by a missing CSRF token check in the LESS compiler of com_templates. The provided connected documents confirm the vulnerable component and root cause but do not provide exploit details or ...

PT-2020-20125 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.15 Description: A missing CSRF token check in the LESS compiler of com templates causes a CSRF issue. This allows for potential exploitation. Recommendations: For versions prior to 3.9.15, update to version 3.9.1...

CVE-2020-8420: Cross-Site Request Forgery (CSRF)

An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

[20200102] - Core - CSRF com_templates LESS compiler

A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

Less Compiler Arbitrary Code Execution Vulnerability

LESS is a dynamic cascading style sheet language designed by Alexis Sellier. An arbitrary code execution vulnerability exists in Less Compiler. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application...