Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-8870
6.8
MEDIUMCVSS v2
Published
November 4, 2016
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting.
GitHub
Docker Hub