Description

Joomla! Core is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. Joomla! Core versions ranging from 1.5.0 and up to and including 3.9.4 are vulnerable.

Remediation

Update to Joomla! Core version 3.9.5 or latest

References

https://www.exploit-db.com/exploits/46710

https://packetstormsecurity.com/files/152515/Joomla-3.9.4-Arbitrary-File-Deletion-Directory-Traversal.html

https://developer.joomla.org/security-centre/777-20190401-core-directory-traversal-in-com-media.html

Related Vulnerabilities

Apache HTTP Server Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2009-1955)

WebLogic CVE-2018-15756 Vulnerability (CVE-2018-15756)

WordPress URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-10101)

WordPress Plugin Anti-Splog Cross-Site Scripting (2.1.7)

Magento Incorrect Authorization Vulnerability (CVE-2021-28567)

Severity

High

Classification

CVE-2019-10945 CWE-22 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update Directory Traversal