CVE-2018-15882

EPSS 0.51%
Veröffentlicht 29.08.2018 03:29:00
Zuletzt bearbeitet 21.11.2024 03:51:38
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Joomla ≫ Joomla! Version < 3.8.12

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.51%	0.656

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.securitytracker.com/id/1041913

Third Party Advisory

http://www.securityfocus.com/bid/105166

Third Party Advisory

VDB Entry

https://developer.joomla.org/security-centre/743-20180801-core-hardening-the-inputfilter-for-phar-stubs.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-15882

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-15882

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-15882

EUVD