CVE-2017-7988

MEDIUM

Joomla! 1.6.0-3.6.5 - ACL Violation via Article Author Overwrite

Title source: llm
STIX 2.1

Description

In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows overwriting the author of an article.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/98022

Scores

CVSS v3 5.3
EPSS 0.0001
EPSS Percentile 0.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Details

Status published
Products (50)
joomla/joomla\! 1.5.16
joomla/joomla\! 1.5.17
joomla/joomla\! 1.5.18
joomla/joomla\! 1.5.19
joomla/joomla\! 1.5.20
joomla/joomla\! 1.5.21
joomla/joomla\! 1.5.22
joomla/joomla\! 1.5.23
joomla/joomla\! 1.5.24
joomla/joomla\! 1.5.25
... and 40 more
Published Apr 25, 2017
Tracked Since Feb 18, 2026