CVE-2015-8563: CSRF
Published Dec 16, 2015
·Updated
Cross-site request forgery (CSRF) vulnerability in the comtemplates component in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
16 affected components
Joomla Joomla\!=3.2.0
Joomla Joomla\!=3.2.1
Joomla Joomla\!=3.2.2
Joomla Joomla\!=3.2.3
Joomla Joomla\!=3.2.4
Joomla Joomla\!=3.3.0
Joomla Joomla\!=3.3.1
Joomla Joomla\!=3.3.2
Joomla Joomla\!=3.3.3
Joomla Joomla\!=3.3.4
Joomla Joomla\!=3.3.5
Joomla Joomla\!=3.4.0
Joomla Joomla\!=3.4.1
Joomla Joomla\!=3.4.3
Joomla Joomla\!=3.4.4
Joomla Joomla\!=3.4.5
Event History
Dec 16, 2015
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8563?
CVE-2015-8563 has been classified as a high severity vulnerability due to its potential to allow cross-site request forgery attacks.
2
How do I fix CVE-2015-8563?
To remediate CVE-2015-8563, you should upgrade Joomla! to version 3.4.6 or later.
3
What are the affected versions of Joomla! for CVE-2015-8563?
Joomla! versions 3.2.0 through 3.4.5 are affected by CVE-2015-8563.
4
Can CVE-2015-8563 affect my Joomla! website?
Yes, if your Joomla! installation is running any version between 3.2.0 and 3.4.5, it is vulnerable to CVE-2015-8563.
5
What type of vulnerability is CVE-2015-8563?
CVE-2015-8563 is classified as a cross-site request forgery (CSRF) vulnerability.