CVE-2019-12766

Опубликовано: 11 июн. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors.

Ссылки

http://www.securityfocus.com/bid/108735
Broken Link
Third Party Advisory
VDB Entry
https://developer.joomla.org/security-centre/784-20190602-core-xss-in-subform-field
Vendor Advisory
http://www.securityfocus.com/bid/108735
Broken Link
Third Party Advisory
VDB Entry
https://developer.joomla.org/security-centre/784-20190602-core-xss-in-subform-field
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

Версия от 3.6.0 (включая) до 3.9.6 (включая)

EPSS

Процентиль: 20%

0.00063

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-687c-mqmp-f29h