All vulnerabilities

Servers and applications

CVE-2018-17855

An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process, he can activate himself.

Severity
High 8.8
Published
9 Oct 2018
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.8.13
Sources
NVD

Affected software

SoftwareAffected versions
Joomla!Servers and applications · cpe:a:joomla:joomla\!
  • From 1.5.0 before 3.8.13

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-17855
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-17855