High severity8.8OSV Advisory· Published Oct 9, 2018· Updated Jun 17, 2026

CVE-2018-17855

Description

An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process, he can activate himself.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/Joomla!OSV2 versions
1.7.3, 2.5.0, 2.5.0_beta1, …+ 1 more
- (no CPE)range: 1.7.3, 2.5.0, 2.5.0_beta1, …
- (no CPE)range: <3.8.13

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105559nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041914nvdThird Party AdvisoryVDB Entry
developer.joomla.org/security-centre/754-20181004-core-acl-violation-in-com-users-for-the-admin-verificationnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000