CVE-2017-9933: Infoleak
Published Jul 17, 2017
·Updated
Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents.
Affected Software
114 affected components
Joomla Joomla\!=1.7.3
Joomla Joomla\!=1.7.4
Joomla Joomla\!=1.7.5
Joomla Joomla\!=2.5.0
Joomla Joomla\!=2.5.1
Joomla Joomla\!=2.5.2
Joomla Joomla\!=2.5.3
Joomla Joomla\!=2.5.4
Joomla Joomla\!=2.5.5
Joomla Joomla\!=2.5.6
Joomla Joomla\!=2.5.7
Joomla Joomla\!=2.5.8
Joomla Joomla\!=2.5.9
Joomla Joomla\!=2.5.10
Joomla Joomla\!=2.5.11
Joomla Joomla\!=2.5.12
Joomla Joomla\!=2.5.13
Joomla Joomla\!=2.5.14
Joomla Joomla\!=2.5.15
Joomla Joomla\!=2.5.16
Joomla Joomla\!=2.5.17
Joomla Joomla\!=2.5.18
Joomla Joomla\!=2.5.19
Joomla Joomla\!=2.5.20
Joomla Joomla\!=2.5.21
Joomla Joomla\!=2.5.22
Joomla Joomla\!=2.5.23
Joomla Joomla\!=2.5.24
Joomla Joomla\!=2.5.25
Joomla Joomla\!=2.5.26
Joomla Joomla\!=2.5.27
Joomla Joomla\!=2.5.28
Joomla Joomla\!=3.0.0
Joomla Joomla\!=3.0.1
Joomla Joomla\!=3.0.2
Joomla Joomla\!=3.0.3
Joomla Joomla\!=3.0.4
Joomla Joomla\!=3.1.0
Joomla Joomla\!=3.1.1
Joomla Joomla\!=3.1.2
Joomla Joomla\!=3.1.3
Joomla Joomla\!=3.1.4
Joomla Joomla\!=3.1.5
Joomla Joomla\!=3.1.6
Joomla Joomla\!=3.2.0
Joomla Joomla\!=3.2.1
Joomla Joomla\!=3.2.2
Joomla Joomla\!=3.2.3
Joomla Joomla\!=3.2.4
Joomla Joomla\!=3.3.0
Joomla Joomla\!=3.3.1
Joomla Joomla\!=3.3.2
Joomla Joomla\!=3.3.3
Joomla Joomla\!=3.3.4
Joomla Joomla\!=3.3.5
Joomla Joomla\!=3.4.0
Joomla Joomla\!=3.4.0-alpha
Joomla Joomla\!=3.4.0-beta1
Joomla Joomla\!=3.4.0-beta2
Joomla Joomla\!=3.4.0-beta3
Joomla Joomla\!=3.4.0-rc1
Joomla Joomla\!=3.4.1
Joomla Joomla\!=3.4.1-rc1
Joomla Joomla\!=3.4.1-rc2
Joomla Joomla\!=3.4.2-rc1
Joomla Joomla\!=3.4.3
Joomla Joomla\!=3.4.4
Joomla Joomla\!=3.4.5
Joomla Joomla\!=3.4.6
Joomla Joomla\!=3.4.7
Joomla Joomla\!=3.4.8
Joomla Joomla\!=3.4.8-rc
Joomla Joomla\!=3.5.0
Joomla Joomla\!=3.5.0-beta
Joomla Joomla\!=3.5.0-beta2
Joomla Joomla\!=3.5.0-beta3
Joomla Joomla\!=3.5.0-beta4
Joomla Joomla\!=3.5.0-beta5
Joomla Joomla\!=3.5.0-rc
Joomla Joomla\!=3.5.0-rc2
Joomla Joomla\!=3.5.0-rc3
Joomla Joomla\!=3.5.0-rc4
Joomla Joomla\!=3.5.1
Joomla Joomla\!=3.5.1-rc
Joomla Joomla\!=3.6.0
Joomla Joomla\!=3.6.0-alpha
Joomla Joomla\!=3.6.0-beta1
Joomla Joomla\!=3.6.0-beta2
Joomla Joomla\!=3.6.0-rc
Joomla Joomla\!=3.6.0-rc2
Joomla Joomla\!=3.6.1
Joomla Joomla\!=3.6.1-rc1
Joomla Joomla\!=3.6.1-rc2
Joomla Joomla\!=3.6.2
Joomla Joomla\!=3.6.3
Joomla Joomla\!=3.6.3-rc1
Joomla Joomla\!=3.6.3-rc2
Joomla Joomla\!=3.6.3-rc3
Joomla Joomla\!=3.6.4
Joomla Joomla\!=3.6.5
Joomla Joomla\!=3.7.0
Joomla Joomla\!=3.7.0-alpha_1
Joomla Joomla\!=3.7.0-alpha_2
Joomla Joomla\!=3.7.0-beta_1
Joomla Joomla\!=3.7.0-beta_2
Joomla Joomla\!=3.7.0-beta_3
Joomla Joomla\!=3.7.0-beta_4
Joomla Joomla\!=3.7.0-rc1
Joomla Joomla\!=3.7.0-rc2
Joomla Joomla\!=3.7.0-rc3
Joomla Joomla\!=3.7.0-rc4
Joomla Joomla\!=3.7.1
Joomla Joomla\!=3.7.1-rc1
Joomla Joomla\!=3.7.1-rc2
Event History
Jul 17, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9933?
CVE-2017-9933 is categorized as a medium severity vulnerability.
2
How do I fix CVE-2017-9933?
To mitigate CVE-2017-9933, you should upgrade Joomla! CMS to version 3.7.3 or later.
3
What platforms are affected by CVE-2017-9933?
CVE-2017-9933 affects Joomla! CMS versions 1.7.3 through 3.7.2.
4
What type of vulnerability is CVE-2017-9933?
CVE-2017-9933 is classified as an improper cache invalidation vulnerability.
5
What impact does CVE-2017-9933 have on users?
CVE-2017-9933 could lead to unauthorized disclosure of sensitive form contents.