An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users.

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.20. It is, therefore, affected by multiple vulnerabilities.

- A missing token check in the ajax_install endpoint com_installer causes a CSRF vulnerability.

- Missing validation checks at the usergroups table object can result into an broken site configuration. (CVE-2020-15699)

- A missing token check in the remove request section of com_privacy causes a CSRF vulnerability. (CVE-2020-15695)

- Internal read-only fields in the User table class could be modified by users. (CVE-2020-15697)

- Lack of input filtering and escaping allows XSS attacks in mod_random_image (CVE-2020-15696)

- Inadequate filtering in the system information screen could expose redis or proxy credentials (CVE-2020-15698)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.20. It is, therefore, affected by multiple vulnerabilities.

  - A missing token check in the ajax_install endpoint com_installer causes a CSRF vulnerability. (20200701)

  - Missing validation checks at the usergroups table object can result into an broken site configuration.
    (CVE-2020-15699)

  - A missing token check in the remove request section of com_privacy causes a CSRF vulnerability.
    (CVE-2020-15695)

  - Internal read-only fields in the User table class could be modified by users. (CVE-2020-15697)

  - Lack of input filtering and escaping allows XSS attacks in mod_random_image (CVE-2020-15696)

  - Inadequate filtering in the system information screen could expose redis or proxy credentials     (CVE-2020-15698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
112562	Joomla! 2.5.x < 3.9.20 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	medium
138877	Joomla 2.5.x < 3.9.20 Multiple Vulnerabilities (5814-joomla-3-9-20)	Nessus	CGI abuses	Remote	medium

Detections

Analytics

CVE-2020-15697

medium

Tenable Plugins

medium

medium