Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5397)

Description

Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload code via unknown vectors.

Remediation

References

CVE-2015-5397

Related Vulnerabilities

Nexus Repository Manager Incorrect Authorization Vulnerability (CVE-2018-16620)

Apache Tomcat Resource Management Errors Vulnerability (CVE-2012-4534)

jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)

WordPress Plugin CSS & JavaScript Toolbox SQL Injection (9.2)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2890)

Severity

Medium

Classification

CVE-2015-5397 CWE-352