← All advisories

High severity8.8OSV Advisory· Published Oct 9, 2018· Updated Jun 17, 2026

CVE-2018-17858

CVE-2018-17858

Description

An issue was discovered in Joomla! before 3.8.13. com_installer actions do not have sufficient CSRF hardening in the backend.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Joomla/Joomla!OSV3 versions
2.5.0, 2.5.1, 2.5.4, …+ 2 more
- (no CPE)range: 2.5.0, 2.5.1, 2.5.4, …
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: >=2.5.0,<3.8.13
- (no CPE)range: <3.8.13

Patches

Vulnerability mechanics

References

3

www.securityfocus.com/bid/105559nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041914nvdThird Party AdvisoryVDB Entry
developer.joomla.org/security-centre/755-20181005-core-csrf-hardening-in-com-installer.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.