Description

An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished or published with restricted view permission.

Remediation

References

CVE-2018-11327

Related Vulnerabilities

Drupal Core 8.9.x Directory Traversal (8.9.0 - 8.9.16)

WordPress Plugin Browser Screenshots Cross-Site Scripting (1.7.5)

WordPress Plugin Numbers generator and validator Multiple Unspecified Vulnerabilities (1.02)

WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (32.0.6)

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-21706)

Severity

Medium

Classification

CVE-2018-11327 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities