Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-26038

[20210704] - Core - Privilege escalation through com_installer

Description

An issue was discovered in Joomla! 2.5.0 through 3.9.27. Install action in com_installer lack the required hardcoded ACL checks for superusers. A default system is not affected cause the default ACL for com_installer is limited to super users already.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

  • 2.5.0-3.9.27affected

References