CVE-2018-12712: Input Validation
An issue was discovered in Joomla! 2.5.0 through 3.8.8 before 3.8.9. The autoload code checks classnames to be valid, using the "classexists" function in PHP. In PHP 5.3, this function validates invalid names as valid, which can result in a Local File Inclusion.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-12712?
CVE-2018-12712 has a medium severity level due to its potential for local file inclusion vulnerabilities.
How do I fix CVE-2018-12712?
To fix CVE-2018-12712, upgrade Joomla! to version 3.8.9 or later.
What versions of Joomla! are affected by CVE-2018-12712?
CVE-2018-12712 affects Joomla! versions 2.5.0 through 3.8.8.
Can CVE-2018-12712 lead to remote code execution?
CVE-2018-12712 primarily leads to local file inclusion, which might expose files but doesn't directly result in remote code execution.
What are the potential impacts of CVE-2018-12712?
The potential impacts of CVE-2018-12712 include unauthorized file access and exposure of sensitive information on the server.