CVE-2021-26038: falha em Joomla! CMS
[20210704] - Core - Privilege escalation through com_installer
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.0%
An issue was discovered in Joomla! 2.5.0 through 3.9.27. Install action in com_installer lack the required hardcoded ACL checks for superusers. A default system is not affected cause the default ACL for com_installer is limited to super users already.
Produtos afetados
Joomla! Project · Joomla! CMSCVEs relacionadas — Joomla! CMS
No mesmo produto, das mais perigosas para as menos.
CVE-2023-23752MEDIUM[20230201] - Core - Improper access check in webservice endpointsEPSS 99.8%KEVCVE-2021-26030—[20210401] - Core - Escape xss in logo parameter error pagesEPSS 82.8%CVE-2021-23124—[20210102] - Core - XSS in mod_breadcrumbs aria-label attributeEPSS 79.0%CVE-2024-21726MEDIUM[20240205] - Core - Inadequate content filtering within the filter codeEPSS 48.8%CVE-2020-35613—[20201104] - Core - SQL injection in com_users list viewEPSS 28.9%CVE-2024-21725MEDIUM[20240204] - Core - XSS in mail address outputsEPSS 26.8%