CVE-2015-5397

Published: Jul 14, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload code via unknown vectors.

Affected (22)

Products: Joomla: Joomla!

Joomla

1 product

Joomla!

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Version 3.2.0
Joomla Joomla!	Version 3.2.1
Joomla Joomla!	Version 3.2.2
Joomla Joomla!	Version 3.2.3
Joomla Joomla!	Version 3.2.4
Joomla Joomla!	Version 3.2.5
Joomla Joomla!	Version 3.3.0
Joomla Joomla!	Version 3.3.1
Joomla Joomla!	Version 3.3.2
Joomla Joomla!	Version 3.3.3
Joomla Joomla!	Version 3.3.4
Joomla Joomla!	Version 3.3.5
Joomla Joomla!	Version 3.4.0
Joomla Joomla!	Version 3.4.0 alpha
Joomla Joomla!	Version 3.4.0 beta1
Joomla Joomla!	Version 3.4.0 beta2
Joomla Joomla!	Version 3.4.0 beta3
Joomla Joomla!	Version 3.4.0 rc1
Joomla Joomla!	Version 3.4.1
Joomla Joomla!	Version 3.4.1 rc1
Joomla Joomla!	Version 3.4.1 rc2
Joomla Joomla!	Version 3.4.2 rc1