Detections
Analytics

CVE-2018-17855

high

Description

An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process, he can activate himself.

References

http://www.securitytracker.com/id/1041914

http://www.securityfocus.com/bid/105559

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-9598

https://developer.joomla.org/security-centre/754-20181004-core-acl-violation-in-com-users-for-the-admin-verification

Details

Source: Mitre, NVD

Published: 2018-10-09

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00432