CVE-2018-11321 - An issue was discovered in com_fields in Joomla! Core before 3.8.8

Back Back to CVE browser

MEDIUM

An issue was discovered in com_fields in Joomla! Core before 3.8.8

Published May 22, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 1.93%

Description

An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

http://www.securityfocus.com/bid/104271
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040966
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://developer.joomla.org/security-centre/734-20180506-core-filter-field-in-com-fields-allows-remote-code-execution.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/104271		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040966		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://developer.joomla.org/security-centre/734-20180506-core-filter-field-in-com-fields-allows-remote-code-execution.html		x_refsource_MISCVendor Advisory