Joomla Vulnerabilidad

Cronología

Escribe

Producto

Joomla CMS308
Joomla-cbe Com Cbe1
Joomla-clantools Clantools1
Joomla.batjo Com Shoutbox1
Joomla-research Com Jresearch1

Contramedidas

Official Fix216
Temporary Fix0
Workaround0
Unavailable8
Not Defined89

Explotabilidad

High22
Functional0
Proof-of-Concept67
Unproven7
Not Defined217

Vector de acceso

Not Defined0
Physical0
Local11
Adjacent0
Network302

Autenticación

Not Defined0
High1
Low84
None228

La interacción del usuario

Not Defined0
Required111
None202

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤427
≤542
≤687
≤766
≤870
≤915
≤106

CVSSv3 Temp

≤10
≤20
≤30
≤435
≤569
≤666
≤797
≤827
≤916
≤103

VulDB

≤10
≤20
≤31
≤429
≤575
≤655
≤767
≤876
≤93
≤107

NVD

≤10
≤20
≤30
≤41
≤58
≤615
≤737
≤813
≤914
≤1014

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k7
<10k165
<25k138
<50k3
<100k0
≥100k0

Explotar hoy

<1k261
<2k3
<5k18
<10k31
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (6): CMS (308), Clantools (1), Com Cbe (1), Com Jresearch (1), Com Shoutbox (1), D4J eZine (1)

Link to Vendor Website: https://www.joomla.org/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2024-02-203.53.5Joomla CMS cross site scriptingContent Management SystemNot DefinedNot Defined0.000430.00CVE-2024-21726
2024-02-203.53.5Joomla CMS Mail Address cross site scriptingContent Management SystemNot DefinedNot Defined0.000430.00CVE-2024-21725
2024-02-203.53.5Joomla CMS Media Selection cross site scriptingContent Management SystemNot DefinedNot Defined0.000430.03CVE-2024-21724
2024-02-203.53.5Joomla CMS URL Parser RedirectContent Management SystemNot DefinedNot Defined0.000610.03CVE-2024-21723
2024-02-203.13.1Joomla CMS MFA Management autenticación débilContent Management SystemNot DefinedNot Defined0.000430.04CVE-2024-21722
2021-05-263.53.5Joomla CMS Data Download Endpoint cross site request forgeryContent Management SystemNot DefinedNot Defined0.000530.00CVE-2021-26034
2021-05-263.53.5Joomla CMS AJAX Reordering Endpoint cross site request forgeryContent Management SystemNot DefinedNot Defined0.000530.00CVE-2021-26033
2021-05-263.53.5Joomla CMS canUpload cross site scriptingContent Management SystemNot DefinedNot Defined0.001030.08CVE-2021-26032
2020-08-265.24.9Joomla CMS mod_latestactions cross site scriptingContent Management SystemNot DefinedOfficial Fix0.001030.00CVE-2020-24599
2020-08-266.66.3Joomla CMS com_content RedirectContent Management SystemNot DefinedOfficial Fix0.001030.02CVE-2020-24598
2020-07-156.36.3Joomla CMS com_installer cross site request forgeryContent Management SystemNot DefinedNot Defined0.000530.00CVE-2020-15700
2020-07-155.35.3Joomla CMS Validation autenticación débilContent Management SystemNot DefinedNot Defined0.000770.02CVE-2020-15699
2020-07-155.35.3Joomla CMS Filter Credentials divulgación de informaciónContent Management SystemNot DefinedNot Defined0.001100.05CVE-2020-15698
2020-07-155.35.3Joomla CMS escalada de privilegiosContent Management SystemNot DefinedNot Defined0.000500.07CVE-2020-15697
2020-07-155.45.4Joomla CMS mod_random_image cross site scriptingContent Management SystemNot DefinedNot Defined0.001030.00CVE-2020-15696
2020-07-156.36.3Joomla CMS com_privacy cross site request forgeryContent Management SystemNot DefinedNot Defined0.000530.00CVE-2020-15695
2020-06-025.95.6Joomla CMS Textfilter escalada de privilegiosContent Management SystemNot DefinedOfficial Fix0.000770.00CVE-2020-13763
2020-06-025.24.9Joomla CMS com_modules cross site scriptingContent Management SystemNot DefinedOfficial Fix0.001030.00CVE-2020-13762
2020-06-025.24.9Joomla CMS Articles cross site scriptingContent Management SystemNot DefinedOfficial Fix0.001030.00CVE-2020-13761
2020-06-026.56.2Joomla CMS com_postinstall cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000730.00CVE-2020-13760
2020-04-216.36.1Joomla CMS com_users escalada de privilegiosContent Management SystemNot DefinedOfficial Fix0.000770.00CVE-2020-11891
2020-04-216.36.1Joomla CMS ACL escalada de privilegiosContent Management SystemNot DefinedOfficial Fix0.000770.00CVE-2020-11890
2020-04-215.95.7Joomla CMS com_users escalada de privilegiosContent Management SystemNot DefinedOfficial Fix0.000770.07CVE-2020-11889
2020-03-168.58.4Joomla CMS sql injectionContent Management SystemNot DefinedOfficial Fix0.001960.15CVE-2020-10243
2020-03-165.25.1Joomla CMS Protostar/Beez3 cross site scriptingContent Management SystemNot DefinedOfficial Fix0.001030.04CVE-2020-10242

288 no se muestran más entradas

Might our Artificial Intelligence support you?

Check our Alexa App!