CVE-2018-11324 — Race Condition in Joomla !

CWE-362 — Race Condition4 documents4 sources
Severity
5.9MEDIUMNVD
EPSS
0.0%
top 93.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Joomla !
Timeline
PublishedMay 22
Latest updateMay 14

Description

An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updates, could create a race condition where a session that was expected to be destroyed would be recreated.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages1 packages

▶NVDjoomla/joomla_!< 3.8.8

🔴Vulnerability Details

3
GHSA
GHSA-9j47-8fgc-498v: An issue was discovered in Joomla! Core before 3↗2022-05-14
▶
OSV
python-urllib3 vulnerabilities↗2019-05-21
▶
CVEList
CVE-2018-11324: An issue was discovered in Joomla! Core before 3↗2018-05-22
▶
CVE-2018-11324 — Race Condition in Joomla ! | cvebase