CVE-2015-8564 — Improper Input Validation in Joomla !

CWE-20 — Improper Input ValidationCWE-22 — Path Traversal3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 80.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Joomla !
Timeline
PublishedDec 16
Latest updateMay 17

Description

Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via directory traversal sequences in the XML install file in an extension package archive.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDjoomla/joomla_!5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-v945-3996-3fh9: Directory traversal vulnerability in Joomla! 3↗2022-05-17
▶
CVEList
CVE-2015-8564: Directory traversal vulnerability in Joomla! 3↗2015-12-16
▶
CVE-2015-8564 — Improper Input Validation in Joomla ! | cvebase