Description

An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users.

Remediation

References

CVE-2020-15697

Related Vulnerabilities

WordPress Plugin NEX-Forms-Ultimate Form builder SQL Injection (3.0)

Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4194)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1447)

Atlassian Jira Incorrect Authorization Vulnerability (CVE-2019-3401)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-31804)

Severity

Medium

Classification

CVE-2020-15697 CWE-732 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities