joomla vulnerabilities (Bitnami)
160 vulnerabilities.
joomlaBitnami[20220305] - Core - Inadequate filtering on the selected Ids9.8 CriticaljoomlaBitnami[20220304] - Core - Missing input validation within com_fields class inputs6.1 MediumjoomlaBitnami[20220303] - Core - User row are not bound to a authentication mechanism9.8 CriticaljoomlaBitnami[20220302] - Core - Path Disclosure within filesystem error messages5.3 MediumjoomlaBitnami[20220301] - Core - Zip Slip within the Tar extractor7.5 HighjoomlaBitnami[20210801] - Core - Insufficient access control for com_media deletion endpoint9.1 CriticaljoomlaBitnami[20210705] - Core - XSS in com_media imagelist6.1 MediumjoomlaBitnami[20210704] - Core - Privilege escalation through com_installer7.5 HighjoomlaBitnami[20210703] - Core - Lack of enforced session termination5.3 MediumjoomlaBitnami[20210702] - Core - DoS through usergroup table manipulation7.5 HighjoomlaBitnami[20210701] - Core - XSS in JForm Rules field6.1 MediumjoomlaBitnami[20210503] - Core - CSRF in data download endpoints6.5 MediumjoomlaBitnami[20210502] - Core - CSRF in AJAX reordering endpoint6.5 MediumjoomlaBitnami[20210501] - Core - Adding HTML to the executable block list of MediaHelper::canUpload6.1 MediumjoomlaBitnami[20210402] - Core - Inadequate filters on module layout settings5.3 MediumjoomlaBitnami[20210401] - Core - Escape xss in logo parameter error pages6.1 MediumjoomlaBitnami[20210309] - Core - Inadequate filtering of form contents could allow to overwrite the author field5.3 MediumjoomlaBitnami[20210308] - Core - Path Traversal within joomla/archive zip class5.5 MediumjoomlaBitnami[20210307] - Core - ACL violation within com_content frontend editing5.3 MediumjoomlaBitnami[20210306] - Core - com_media allowed paths that are not intended for image uploads7.5 HighjoomlaBitnami[20210305] - Core - Input validation within the template manager7.5 HighjoomlaBitnami[20210304] - Core - XSS within the feed parser library6.1 MediumjoomlaBitnami[20210303] - Core - XSS within alert messages showed to users6.1 MediumjoomlaBitnami[20210302] - Core - Potential Insecure FOFEncryptRandval9.1 CriticaljoomlaBitnami[20210301] - Core - Insecure randomness within 2FA secret generation9.1 CriticaljoomlaBitnami[20210301] - Core - Insecure randomness within 2FA secret generation5.3 MediumjoomlaBitnami[20210103] - Core - XSS in com_tags image parameters6.1 MediumjoomlaBitnami[20210102] - Core - XSS in mod_breadcrumbs aria-label attribute6.1 MediumjoomlaBitnami[20210101] - Core - com_modules exposes module names5.3 MediumjoomlaBitnami[20201107] - Core - Write ACL violation in multiple core views7.5 HighjoomlaBitnami[20201106] - Core - CSRF in com_privacy emailexport feature6.3 MediumjoomlaBitnami[20201105] - Core - User Enumeration in backend login5.3 MediumjoomlaBitnami[20201104] - Core - SQL injection in com_users list view9.8 CriticaljoomlaBitnami[20201103] - Core - Path traversal in mod_random_image7.5 HighjoomlaBitnami[20201102] - Core - Disclosure of secrets in Global Configuration page7.5 HighjoomlaBitnami[20201101] - Core - com_finder ignores access levels on autosuggest7.5 HighjoomlaBitnamiAn issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of...6.1 MediumjoomlaBitnamiAn issue was discovered in Joomla! before 3.9.21. Lack of escaping in mod_latestactions allows...6.1 MediumjoomlaBitnamiAn issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install...6.3 MediumjoomlaBitnamiAn issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups...5.3 MediumjoomlaBitnamiAn issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information...5.3 MediumjoomlaBitnamiAn issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table...4.3 MediumjoomlaBitnamiAn issue was discovered in Joomla! through 3.9.19. Lack of input filtering and escaping allows...6.1 MediumjoomlaBitnamiAn issue was discovered in Joomla! through 3.9.19. A missing token check in the remove request...6.3 MediumjoomlaBitnamiIn Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF.8.8 HighjoomlaBitnamiIn Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles -...6.1 MediumjoomlaBitnamiIn Joomla! before 3.9.19, incorrect input validation of the module tag option in com_modules...6.1 MediumjoomlaBitnamiIn Joomla! before 3.9.19, the default settings of the global textfilter configuration do not...7.5 HighjoomlaBitnamiAn issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level...5.3 MediumjoomlaBitnamiAn issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level...5.3 Medium- Show moreLoading…