CVE-2020-11889: Medium severity joomla vulnerability
Published Apr 21, 2020
·Updated
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups.
Affected Software
1 affected component
Joomla Joomla\!>=2.5.0<3.9.17
Event History
Apr 21, 2020
CVE Published
via MITRE·04:39 PM
Data Sourced
via MITRE·04:39 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-11889?
CVE-2020-11889 has been classified as a critical vulnerability.
2
How do I fix CVE-2020-11889?
To fix CVE-2020-11889, update Joomla! to version 3.9.17 or later.
3
What does CVE-2020-11889 affect?
CVE-2020-11889 affects Joomla! versions before 3.9.17, specifically in the com_users component.
4
What can attackers do due to CVE-2020-11889?
Attackers can unauthorizedly delete user groups due to incorrect ACL checks in the access level section.
5
When was CVE-2020-11889 discovered?
CVE-2020-11889 was discovered in early April 2020.