CVE-2016-9081

Critical

Published: 23/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Joomla! versions 3.4.4 through 3.6.3 allow attackers to reset username, password, and user group assignments, and possibly perform other user account modifications via unspecified vectors.

Risk Assessment

Attackers may gain full control over user accounts, potentially leading to unauthorized access to sensitive data and organizational resources.

Recommendation

It is recommended to update Joomla! to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors.