Description

An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process, he can activate himself.

Remediation

References

CVE-2018-17855

Related Vulnerabilities

SharePoint CVE-2022-21840 Vulnerability (CVE-2022-21840)

WordPress Plugin iThemes Security (formerly Better WP Security) Security Bypass (7.9.0)

WordPress Plugin Welcart e-Commerce Multiple Vulnerabilities (1.8.2)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9409)

WordPress Plugin GD Star Rating 'de' Parameter SQL Injection (1.9.10)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-269 CVE-2018-17855