CVE-2017-11364

Published Aug 2, 2017 CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed
Description
The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-2993 The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00093}

epss

{'score': 0.00125}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 6:05 PM
Reserved
Jul 17, 2017, 12:00 AM
Status
Modified
Published
Aug 2, 2017, 2:29 PM
Modified
Jun 17, 2026, 1:01 AM