CVE-2017-7988

Published: Apr 25, 2017Modified: May 13, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows overwriting the author of an article.

Affected (120)

Products: Joomla: Joomla!

Joomla

1 product

Joomla!

Configuration A

120 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Version 1.5.16
Joomla Joomla!	Version 1.5.17
Joomla Joomla!	Version 1.5.18
Joomla Joomla!	Version 1.5.19
Joomla Joomla!	Version 1.5.20
Joomla Joomla!	Version 1.5.21
Joomla Joomla!	Version 1.5.22
Joomla Joomla!	Version 1.5.23
Joomla Joomla!	Version 1.5.24
Joomla Joomla!	Version 1.5.25
Joomla Joomla!	Version 1.5.26
Joomla Joomla!	Version 1.6.0
Joomla Joomla!	Version 1.6.1
Joomla Joomla!	Version 1.6.2
Joomla Joomla!	Version 1.6.3
Joomla Joomla!	Version 1.6.4
Joomla Joomla!	Version 1.6.5
Joomla Joomla!	Version 1.6.6
Joomla Joomla!	Version 1.7.0
Joomla Joomla!	Version 1.7.1
Joomla Joomla!	Version 1.7.2
Joomla Joomla!	Version 1.7.3
Joomla Joomla!	Version 1.7.4
Joomla Joomla!	Version 1.7.5
Joomla Joomla!	Version 2.5.0
Joomla Joomla!	Version 2.5.10
Joomla Joomla!	Version 2.5.11
Joomla Joomla!	Version 2.5.12
Joomla Joomla!	Version 2.5.13
Joomla Joomla!	Version 2.5.14
Joomla Joomla!	Version 2.5.15
Joomla Joomla!	Version 2.5.16
Joomla Joomla!	Version 2.5.17
Joomla Joomla!	Version 2.5.18
Joomla Joomla!	Version 2.5.19
Joomla Joomla!	Version 2.5.1
Joomla Joomla!	Version 2.5.20
Joomla Joomla!	Version 2.5.21
Joomla Joomla!	Version 2.5.22
Joomla Joomla!	Version 2.5.23
Joomla Joomla!	Version 2.5.24
Joomla Joomla!	Version 2.5.25
Joomla Joomla!	Version 2.5.26
Joomla Joomla!	Version 2.5.27
Joomla Joomla!	Version 2.5.28
Joomla Joomla!	Version 2.5.2
Joomla Joomla!	Version 2.5.3
Joomla Joomla!	Version 2.5.4
Joomla Joomla!	Version 2.5.5
Joomla Joomla!	Version 2.5.6
Joomla Joomla!	Version 2.5.7
Joomla Joomla!	Version 2.5.8
Joomla Joomla!	Version 2.5.9
Joomla Joomla!	Version 3.0.0
Joomla Joomla!	Version 3.0.1
Joomla Joomla!	Version 3.0.2
Joomla Joomla!	Version 3.1.0
Joomla Joomla!	Version 3.1.1
Joomla Joomla!	Version 3.1.2
Joomla Joomla!	Version 3.1.3
Joomla Joomla!	Version 3.1.4
Joomla Joomla!	Version 3.1.5
Joomla Joomla!	Version 3.1.6
Joomla Joomla!	Version 3.2.0
Joomla Joomla!	Version 3.2.1
Joomla Joomla!	Version 3.2.2
Joomla Joomla!	Version 3.2.3
Joomla Joomla!	Version 3.2.4
Joomla Joomla!	Version 3.3.0
Joomla Joomla!	Version 3.3.1
Joomla Joomla!	Version 3.3.2
Joomla Joomla!	Version 3.3.3
Joomla Joomla!	Version 3.3.4
Joomla Joomla!	Version 3.3.5
Joomla Joomla!	Version 3.4.0
Joomla Joomla!	Version 3.4.0 alpha
Joomla Joomla!	Version 3.4.0 beta1
Joomla Joomla!	Version 3.4.0 beta2
Joomla Joomla!	Version 3.4.0 beta3
Joomla Joomla!	Version 3.4.0 rc1
Joomla Joomla!	Version 3.4.1
Joomla Joomla!	Version 3.4.1 rc1
Joomla Joomla!	Version 3.4.1 rc2
Joomla Joomla!	Version 3.4.2
Joomla Joomla!	Version 3.4.2 rc1
Joomla Joomla!	Version 3.4.3
Joomla Joomla!	Version 3.4.4
Joomla Joomla!	Version 3.4.5
Joomla Joomla!	Version 3.4.6
Joomla Joomla!	Version 3.4.7
Joomla Joomla!	Version 3.4.8
Joomla Joomla!	Version 3.4.8 rc
Joomla Joomla!	Version 3.5.0
Joomla Joomla!	Version 3.5.0 beta2
Joomla Joomla!	Version 3.5.0 beta3
Joomla Joomla!	Version 3.5.0 beta4
Joomla Joomla!	Version 3.5.0 beta5
Joomla Joomla!	Version 3.5.0 beta
Joomla Joomla!	Version 3.5.0 rc2
Joomla Joomla!	Version 3.5.0 rc3
Joomla Joomla!	Version 3.5.0 rc4
Joomla Joomla!	Version 3.5.0 rc
Joomla Joomla!	Version 3.5.1
Joomla Joomla!	Version 3.5.1 rc
Joomla Joomla!	Version 3.6.0
Joomla Joomla!	Version 3.6.0 alpha
Joomla Joomla!	Version 3.6.0 beta1
Joomla Joomla!	Version 3.6.0 beta2
Joomla Joomla!	Version 3.6.0 rc2
Joomla Joomla!	Version 3.6.0 rc
Joomla Joomla!	Version 3.6.1
Joomla Joomla!	Version 3.6.1 rc1
Joomla Joomla!	Version 3.6.1 rc2
Joomla Joomla!	Version 3.6.2
Joomla Joomla!	Version 3.6.3
Joomla Joomla!	Version 3.6.3 rc1
Joomla Joomla!	Version 3.6.3 rc2
Joomla Joomla!	Version 3.6.3 rc3
Joomla Joomla!	Version 3.6.4
Joomla Joomla!	Version 3.6.5

References (4)

http://www.securityfocus.com/bid/98022

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://developer.joomla.org/security-centre/688-20170406-core-acl-violations

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/98022

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://developer.joomla.org/security-centre/688-20170406-core-acl-violations

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.