CVE-2020-15700
An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install endpoint of com_installer causes a CSRF vulnerability.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install endpoint of com_installer causes a CSRF vulnerability.
影響パッケージ
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.7.0"},{"last_affected":"3.9.19"}]}]
参照URL
- advisory developer.joomla.org
- web nvd.nist.gov