CVE-2020-35615
[20201106] - Core - CSRF in com_privacy emailexport feature
Résumé
[20201106] - Core - CSRF in com_privacy emailexport feature
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Joomla! 2.5.0 through 3.9.22. A missing token check in the emailexport feature of com_privacy causes a CSRF vulnerability.
Paquets affectés
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"2.5.0"},{"last_affected":"3.9.22"}]}]
Références
- advisory developer.joomla.org
- web nvd.nist.gov