Description

Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. Joomla! Core versions 3.x.x ranging from 3.7.0 and up to and including 3.8.1 are vulnerable.

Remediation

Update to Joomla! Core version 3.8.2 or latest

References

https://developer.joomla.org/security-centre/715-20171103-core-information-disclosure.html

Related Vulnerabilities

Bootstrap Table Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2021-23472)

WordPress Plugin Name Directory Cross-Site Request Forgery (1.17.4)

WordPress Plugin YouTube Advanced by Embed Plus Cross-Site Scripting (5.3)

WordPress Plugin Simple visitor stat Cross-Site Scripting (1.0)

silverstripeCMS Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-12245)

Severity

High

Classification

CVE-2017-16633 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure