CVEvulnerability
CVE-2019-7739
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
An issue was discovered in Joomla! before 3.9.3. The "No Filtering" textfilter overrides child settings in the Global Configuration. This is intended behavior. However, it might be unexpected for the user because the configuration dialog lacks an additional message to explain this.
Affected configurations
• joomla joomla\! (>= 2.5.0 <= 3.9.2)
References
- http://www.securityfocus.com/bid/107015 Third Party Advisory, VDB Entry
- https://developer.joomla.org/security-centre/767-20190203-core-additional-warning-in-the-global-configuration-textfilter-settings Vendor Advisory
- http://www.securityfocus.com/bid/107015 Third Party Advisory, VDB Entry
- https://developer.joomla.org/security-centre/767-20190203-core-additional-warning-in-the-global-configuration-textfilter-settings Vendor Advisory