Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Joomla Improper Access Control Vulnerability - CVE-2016-9838 - Vulnerability Database
Joomla

Joomla Improper Access Control Vulnerability - CVE-2016-9838

High
Reference: CVE-2016-9838
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-9838
Title: Joomla Improper Access Control Vulnerability
Overview:

An issue was discovered in components/com_users/models/registration.php in Joomla before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user39s account and reset the user39s group mappings username and password as demonstrated by submitting a form that targets the registration.register task.