peter bassill · operator
$ cve CVE-2018-6610 JSON

CVE-2018-6610 EXPLOIT

7.5
HIGH · CVSS 3.0 · EPSS 7.9% (pctl 95)

Patch early

A public exploit exists.

Description

Information Leakage exists in the jLike 1.0 component for Joomla! via a task=getUserByCommentId request.

Scoring

CVSS7.5 (HIGH, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS7.92% — more likely to be exploited than 95% of all CVEs
WeaknessCWE-200
On CISA KEVno
Public exploityes
Published2018-02-05
Last modified2026-06-17

Affected (1)

VendorProduct
jlike projectjlike

Public exploits

SourceTitleDate
exploit-dbJoomla! Component jLike 1.0 - Information Leak2018-02-05

References

→ the Explorer  ·  watch your stack  ·  NVD