CVE-2018-11322

EPSS 0.21%
Veröffentlicht 22.05.2018 15:29:00
Zuletzt bearbeitet 21.11.2024 03:43:08
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webserver.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Joomla ≫ Joomla! Version < 3.8.8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.431

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	1.6	5.9	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6	6.8	6.4	AV:N/AC:M/Au:S/C:P/I:P/A:P

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.securitytracker.com/id/1040966

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/104272

Third Party Advisory

VDB Entry

https://developer.joomla.org/security-centre/730-20180502-core-add-phar-files-to-the-upload-blacklist.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-11322

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-11322

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-11322

EUVD