CVE-2020-35613: [20201104] - Core - SQL injection in com_users list view
Published Dec 28, 2020
·Updated
An issue was discovered in Joomla! 3.0.0 through 3.9.22. Improper filter blacklist configuration leads to a SQL injection vulnerability in the backend user list.
Affected Software
1 affected component
Joomla Joomla\!>=3.0.0<=3.9.22
Event History
Dec 28, 2020
CVE Published
via MITRE·07:39 PM
Data Sourced
via MITRE·07:39 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-35613?
CVE-2020-35613 is a SQL injection vulnerability in the backend user list of Joomla! 3.0.0 through 3.9.22.
2
How severe is CVE-2020-35613?
CVE-2020-35613 has a severity rating of 9.8 (Critical).
3
How does CVE-2020-35613 affect Joomla!?
CVE-2020-35613 affects Joomla! versions 3.0.0 through 3.9.22.
4
What is the CWE for CVE-2020-35613?
The CWE for CVE-2020-35613 is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
5
How can I fix CVE-2020-35613?
To fix CVE-2020-35613, users should update their Joomla! installation to version 3.9.23 or higher.