Description

Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload code via unknown vectors.

Remediation

References

CVE-2015-5397

Related Vulnerabilities

Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-7592)

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9454)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9036)

WordPress Plugin WP Publication Archive 'file' Parameter Directory Traversal (2.3)

WordPress Plugin WooCommerce Weight Based Shipping Cross-Site Request Forgery (5.4.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2015-5397