VULNERABILITY INTELLIGENCE

CVE-2010-1434

CVSS score7.5 HIGH
EPSS probability0.94%
CISA KEVNot currently listed
Published2021-06-21
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain access to sensitive information, which may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable.

Weakness classification

  • CWE-384: Session Fixation

Primary references