CVE-2020-10241: CSRF
Published Mar 16, 2020
·Updated
An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of comtemplates lead to CSRF.
Affected Software
1 affected component
Joomla Joomla\!>=3.2.0<3.9.16
Event History
Mar 16, 2020
CVE Published
via MITRE·03:47 PM
Data Sourced
via MITRE·03:47 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-10241?
CVE-2020-10241 is rated as a medium severity vulnerability due to the potential for CSRF attacks.
2
How do I fix CVE-2020-10241?
To fix CVE-2020-10241, you should upgrade Joomla! to version 3.9.16 or later.
3
What impact does CVE-2020-10241 have on Joomla! installations?
CVE-2020-10241 allows an attacker to execute unauthorized actions on behalf of authenticated users due to missing token checks.
4
Which versions of Joomla! are affected by CVE-2020-10241?
Joomla! versions prior to 3.9.16 are affected by CVE-2020-10241.
5
Is user input validation impacted by CVE-2020-10241?
CVE-2020-10241 does not specifically deal with user input validation but rather focuses on CSRF issues in image actions.