CVE Catalog

CVE-2016-8869

Critical
Published: Translated: NVD NIST

Summary

The register method in the UsersModelRegistration class in Joomla! before version 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update Joomla! to version 3.6.4 or later to mitigate this vulnerability.

Original NVD description (English source)

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS