[20121102] - Core - Clickjacking

• Project: Joomla!
• SubProject: All
• Severity: Moderate
• Versions: 2.5.7 and all earlier 2.5.x versions
• Exploit type: Clickjacking vulnerability
• Reported Date: 2012-October-15
• Fixed Date: 2012-November-08
• CVE Number: CVE-2012-5827

Description

Inadequate protection leads to clickjacking vulnerability.

Affected Installs

Joomla! version 2.5.7 and all earlier 2.5.x

• Project: Joomla!
• SubProject: All
• Severity: Moderate
• Versions: 2.5.7 and all earlier 2.5.x versions
• Exploit type: Clickjacking vulnerability
• Reported Date: 2012-October-15
• Fixed Date: 2012-November-08
• CVE Number: CVE-2012-5827

Description

Inadequate protection leads to clickjacking vulnerability.

Affected Installs

Joomla! version 2.5.7 and all earlier 2.5.x versions.

Solution

Upgrade to version 2.5.8

Reported by Ajay Singh Negi

Contact

The JSST at the Joomla! Security Center.