CVE-2018-15882

EPSS 0.61%
Published 29.08.2018 03:29:00
Last modified 21.11.2024 03:51:38
Source cve@mitre.org
Teams watchlist Login
Open Login

An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Joomla ≫ Joomla! Version < 3.8.12

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.61%	0.688

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.securitytracker.com/id/1041913

Third Party Advisory

http://www.securityfocus.com/bid/105166

Third Party Advisory

VDB Entry

https://developer.joomla.org/security-centre/743-20180801-core-hardening-the-inputfilter-for-phar-stubs.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-15882

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-15882

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-15882

EUVD