[20201106] - Core - CSRF in com_privacy emailexport feature(CVE-2020-35615)

概要

[20201106] - Core - CSRF in com_privacy emailexport feature

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in Joomla! 2.5.0 through 3.9.22. A missing token check in the emailexport feature of com_privacy causes a CSRF vulnerability.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"2.5.0"},{"last_affected":"3.9.22"}]}]