VDB
BDU%3A2024-01592
BDU%3A2024-01592
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Уязвимость системы управления содержимым Joomla!, связанная с неверным сроком действия сеанса, позволяющая нарушителю получить доступ к конфиденциальным данным
Risk Scores
CVSS 2.0
6.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| GNU General Public License | Joomla! | |
| Joomla! Project | Joomla! CMS | 3.2.0-3.10.14, 4.0.0-4.4.2, 5.0.0-5.0.2 |
Timeline
- Feb 20, 2024 CVE Published
- Feb 22, 2024 PoC Published
- Feb 27, 2024 CVE Updated
- Feb 29, 2024 PoC Published
References
- http://developer.joomla.org/security-centre/925-20240201-core-insufficient-session-expiration-in-mfa-management-views.html url
- https://www.cybersecurity-help.cz/vdb/SB2024022067 url
- https://developer.joomla.org/security-centre/925-20240201-core-insufficient-session-expiration-in-mfa-management-views.html vendor-advisory