[20201103] - Core - Path traversal in mod_random_image

CVE-2020-35612

7.5HIGH

Key Information

Vendor: Joomla
Status: Joomla! Cms
Vendor: CVE Published:; 28 December 2020

Summary

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The folder parameter of mod_random_image lacked input validation, leading to a path traversal vulnerability.

Affected Version(s)

Joomla! CMS = 2.5.0-3.9.22

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Dec 28, 2020
Vulnerability Reserved.
Dec 21, 2020

Collectors

NVD DatabaseMitre Database