Joomla ≫ Joomla!

158 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

6.5

CVE-2021-26034

EPSS 0.5%
Veröffentlicht 26.05.2021 11:15:08
Zuletzt bearbeitet 21.11.2024 05:55:47

An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in data download endpoints in com_banners and com_sysinfo.

6.1

CVE-2021-26030

EPSS 82.26%
Veröffentlicht 14.04.2021 18:15:14
Zuletzt bearbeitet 21.11.2024 05:55:46

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page

5.3

CVE-2021-26031

EPSS 1.01%
Veröffentlicht 14.04.2021 18:15:14
Zuletzt bearbeitet 21.11.2024 05:55:46

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate filters on module layout settings could lead to an LFI.

5.3

CVE-2021-23126

EPSS 1.07%
Veröffentlicht 04.03.2021 18:15:13
Zuletzt bearbeitet 21.11.2024 05:51:15

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.

9.1

CVE-2021-23127

EPSS 1.33%
Veröffentlicht 04.03.2021 18:15:13
Zuletzt bearbeitet 21.11.2024 05:51:15

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes.

9.1

CVE-2021-23128

EPSS 1.33%
Veröffentlicht 04.03.2021 18:15:13
Zuletzt bearbeitet 21.11.2024 05:51:15

An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implemetation. That has now been replaced with a call to 'random_bytes()' and its ba...

6.1