CVE-2019-9922

CVSS 5.8 MEDIUMEPSS 10.6%

Vexday Risk Score

33Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS 5.8EPSS 10.6%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

29 Mar 2019Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files.

CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N

Affected products

References