CVE-2018-6377: XSS

Q: Which field types are affected?

The vulnerability affects the com_fields component when using list, radio, or checkbox field types.

Q: What conditions does an attacker need to exploit this?

The CVSS vector indicates network access, low attack complexity, no privileges required, and user interaction required. Successful exploitation can affect confidentiality and integrity, including across a security scope boundary.

Q: Which Joomla! versions need remediation?

Joomla! versions before 3.8.4 are affected. Upgrade to 3.8.4 or later.

Published Jan 30, 2018

Updated

In Joomla! before 3.8.4, inadequate input filtering in comfields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox

Affected Software

1 affected component

Joomla Joomla\!<3.8.4

Event History

Jan 30, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Which field types are affected?

The vulnerability affects the com_fields component when using list, radio, or checkbox field types.

What conditions does an attacker need to exploit this?

The CVSS vector indicates network access, low attack complexity, no privileges required, and user interaction required. Successful exploitation can affect confidentiality and integrity, including across a security scope boundary.

Which Joomla! versions need remediation?

Joomla! versions before 3.8.4 are affected. Upgrade to 3.8.4 or later.

CVE-2018-6377: XSS

Affected Software

Event History

Frequently Asked Questions

Which field types are affected?

What conditions does an attacker need to exploit this?

Which Joomla! versions need remediation?

Company

Resources

Contact

Frequently Asked Questions

Which field types are affected?

What conditions does an attacker need to exploit this?

Which Joomla! versions need remediation?