← All advisories

Medium severity6.5NVD Advisory· Published Jun 11, 2019· Updated Jun 17, 2026

CVE-2019-12764

CVE-2019-12764

Description

An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be manipulated by non Super-Admin users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Joomla/Joomla!2 versions
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: >=3.8.13,<3.9.7
- (no CPE)range: <3.9.7
Joomla!/Joomla!description
Joomla/com_joomlaupdatellm-create
Range: <3.9.7

Patches

Vulnerability mechanics

References

2

www.securityfocus.com/bid/108729nvdBroken LinkThird Party AdvisoryVDB Entry
developer.joomla.org/security-centre/785-20190603-core-acl-hardening-of-com-joomlaupdatenvdVendor Advisory

News mentions

0

No linked articles in our index yet.