Description

An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be manipulated by non Super-Admin users.

Remediation

References

CVE-2019-12764

Related Vulnerabilities

WordPress Plugin Page Animations And Transitions Unspecified Vulnerability (2.1.8)

WordPress Plugin TDO Mini Forms Arbitrary File Upload (0.13.9)

Magento Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-8135)

Drupal Incorrect Authorization Vulnerability (CVE-2023-31250)

WordPress Plugin YT-Audio:Audio Hosting From YouTube in WordPress 'v' Parameter Cross-Site Scripting (1.7)

Severity

Medium

Classification

CVE-2019-12764 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities