CVE-2017-5214

The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:codextrous:b2j_contact:*:*:*:*:*:joomla\!:*:*

Information

Published : 2017-05-17 07:29

Updated : 2019-10-02 17:03


NVD link : CVE-2017-5214

Mitre link : CVE-2017-5214


JSON object : View

CWE
CWE-335

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

Advertisement

dedicated server usa

Products Affected

codextrous

  • b2j_contact