CVE-2018-17856: High severity joomla vulnerability
Published Oct 9, 2018
·Updated
An issue was discovered in Joomla! before 3.8.13. comjoomlaupdate allows the execution of arbitrary code. The default ACL config enabled the ability of Administrator-level users to access comjoomlaupdate and trigger code execution.
Affected Software
2 affected componentsFixes available
composer/joomla/framework>=2.5.4<=3.8.12
3.8.13
Joomla Joomla\!>=2.5.4<3.8.13
Event History
Oct 9, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
May 13, 2022
Advisory Published
01:19 AM
Frequently Asked Questions
1
What is the severity of CVE-2018-17856?
CVE-2018-17856 has a high severity rating due to the ability for Administrator-level users to execute arbitrary code.
2
How do I fix CVE-2018-17856?
To fix CVE-2018-17856, upgrade your Joomla installation to version 3.8.13 or later.
3
What components are affected by CVE-2018-17856?
CVE-2018-17856 affects the com_joomlaupdate component in Joomla! versions prior to 3.8.13.
4
Who can exploit CVE-2018-17856?
CVE-2018-17856 can be exploited by Administrator-level users who have access to the com_joomlaupdate component.
5
What is the impact of CVE-2018-17856?
The impact of CVE-2018-17856 is the potential execution of arbitrary code on vulnerable Joomla installations.