CVEvulnerability

CVE-2017-14595

3.7 LOW Published 2017-09-20 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2017-09-20
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 3.7 LOW — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state.

Affected configurations

• joomla joomla\! 3.7.0 • joomla joomla\! 3.7.1 • joomla joomla\! 3.7.2 • joomla joomla\! 3.7.3 • joomla joomla\! 3.7.4 • joomla joomla\! 3.7.5

References

http://www.securityfocus.com/bid/100900 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039407 Third Party Advisory, VDB Entry
https://developer.joomla.org/security-centre/710-20170901-core-information-disclosure Vendor Advisory
http://www.securityfocus.com/bid/100900 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039407 Third Party Advisory, VDB Entry
https://developer.joomla.org/security-centre/710-20170901-core-information-disclosure Vendor Advisory