Description

An issue was discovered in Joomla! through 3.9.19. A missing token check in the remove request section of com_privacy causes a CSRF vulnerability.

Remediation

References

CVE-2020-15695

Related Vulnerabilities

FluxBB Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2020-28873)

Joomla! Core 1.5.x Cross-Site Scripting (1.5.0 - 1.5.11)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.0.9)

PHP Resource Management Errors Vulnerability (CVE-2010-1861)

WordPress Plugin Really Simple Gallery Multiple Vulnerabilities (1.4)

Severity

Medium

Classification

CVE-2020-15695 CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities