CVE-2018-15882: Malicious File Upload
Published Aug 29, 2018
·Updated
An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter.
Affected Software
1 affected component
Joomla Joomla\!<3.8.12
Event History
Aug 29, 2018
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-15882?
CVE-2018-15882 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2018-15882?
To fix CVE-2018-15882, upgrade Joomla! to version 3.8.12 or later.
3
What types of files are affected by CVE-2018-15882?
CVE-2018-15882 specifically affects phar files that can bypass the upload filter.
4
What could happen if CVE-2018-15882 is exploited?
Exploitation of CVE-2018-15882 could lead to unauthorized file uploads and potential compromise of the Joomla! instance.
5
Which versions of Joomla! are vulnerable to CVE-2018-15882?
Joomla! versions before 3.8.12 are vulnerable to CVE-2018-15882.