Description

The com_contenthistory component in Joomla! 3.2 before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors.

Remediation

References

CVE-2015-7859

Related Vulnerabilities

RubyGems Improper Input Validation Vulnerability (CVE-2015-4020)

MySQL CVE-2021-35645 Vulnerability (CVE-2021-35645)

WordPress Plugin Widgets on Pages Cross-Site Scripting (1.6.0)

WordPress Plugin AccessPress Social Icons Multiple Cross-Site Scripting Vulnerabilities (1.5.5)

Sqlite Other Vulnerability (CVE-2019-20218)

Severity

Medium

Classification

CVE-2015-7859 CWE-200

Tags

Missing Update Known Vulnerabilities