CVE-2017-11364

The CMS installer in Joomla!

published August 2, 2017

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02182 · 82.2th percentile
Published
2017-08-02T14:00Z
EPSS history
Timeline
  • 02 AUG 14:00Z
    The CMS installer in Joomla!
    cvelistv5