Path Traversal in Joomla Joomla\!

CVE-2015-8564

Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via directory traversal sequences in the XML install file in an extension package archive.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.

Affected products

Joomla Joomla\! — versions 3.4.0, 3.4.1, 3.4.3
N/a — versions n/a

Weakness classification (CWE)

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)