CVE-2015-8564: Input Validation
Published Dec 16, 2015
·Updated
Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via directory traversal sequences in the XML install file in an extension package archive.
Affected Software
5 affected components
Joomla Joomla\!=3.4.0
Joomla Joomla\!=3.4.1
Joomla Joomla\!=3.4.3
Joomla Joomla\!=3.4.4
Joomla Joomla\!=3.4.5
Event History
Dec 16, 2015
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8564?
CVE-2015-8564 has a moderate severity level as it allows remote attackers to exploit directory traversal vulnerabilities.
2
How do I fix CVE-2015-8564?
To fix CVE-2015-8564, upgrade your Joomla installation to version 3.4.6 or later.
3
Who is affected by CVE-2015-8564?
CVE-2015-8564 affects all Joomla! versions from 3.4.0 to 3.4.5.
4
What does CVE-2015-8564 exploit?
CVE-2015-8564 exploits directory traversal sequences in the XML install file of an extension package.
5
Can CVE-2015-8564 lead to data exposure?
Yes, CVE-2015-8564 could potentially allow unauthorized access to sensitive files, leading to data exposure.