60
CVE-2017-5215
- CVSS 3.0
- 9.8 critical
- EPSS
- 4%p89
- Published
- ·
- Modified
Description · NVD
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.
- Vendors
- codextrous
- Products
- b2j contact
- Ecosystems
- Joomla
- Weakness
- CWE-20
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H