38 matches found
CVE-2020-10238
An issue was discovered in Joomla! before 3.9.16. Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
CVE-2020-10238
Joomla! before 3.9.16 is vulnerable due to missing ACL checks in com_templates, enabling multiple attack vectors. The CVE-2020-10238 description and multiple advisories (NVD/NVDC OSV) confirm exploitation could allow unauthorized actions on affected sites. Affected software: Joomla! core componen...
CVE-2020-10238: Exposure of Resource to Wrong Sphere
An issue was discovered in Joomla! before 3.9.16. Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
CVE-2020-10241: Cross-Site Request Forgery (CSRF)
An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of comtemplates lead to CSRF...
[20200301] - Core - CSRF in com_templates image actions
Missing token checks in the image actions of comtemplates causes CSRF vulnerabilities...
[20200303] - Core - Incorrect Access Control in com_templates
Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
CVE-2020-8420
An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...
CVE-2020-8420
An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...
CVE-2020-8420
An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...
CVE-2020-8420
An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...
CVE-2020-8420
CVE-2020-8420 affects Joomla! up to version 3.9.14 (before 3.9.15). The issue is a CSRF vulnerability caused by a missing CSRF token check in the LESS compiler of com_templates. The provided connected documents confirm the vulnerable component and root cause but do not provide exploit details or ...
CVE-2020-8420: Cross-Site Request Forgery (CSRF)
An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...
[20200102] - Core - CSRF com_templates LESS compiler
A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...
Joomla! cross-site request forgery vulnerability (CNVD-2015-08379)
Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A cross-site request forgery vulnerability exists in the comtemplates component in Joomla! versions 3.2.0 through...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the comtemplates component in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-8563
Cross-site request forgery CSRF vulnerability in the comtemplates component in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-8563: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the comtemplates component in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...