Description

An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished or published with restricted view permission.

Remediation

References

CVE-2018-11327

Related Vulnerabilities

WordPress Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2014-6412)

WordPress Plugin Alpine PhotoTile for Instagram Cross-Site Scripting (1.2.7.7)

Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.8)

Oracle Database Server CVE-2006-0291 Vulnerability (CVE-2006-0291)

Apache HTTP Server Other Vulnerability (CVE-2003-0987)

Severity

Medium

Classification

CVE-2018-11327 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities