Skip to content
Heist/ feed
Back to feed
Low

Security advisory

Type: advisorySources: OSVCVE: CVE-2017-14595

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2017-14595
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 07:43 UTC · Revision 1

Source evidence

CVE-2017-14595

core-osv · Original source

Published 20 Sept 2017, 18:29 UTC

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state.

osv:CVE-2017-14595
Complete source record
{
  "id": "4680acbcb6d974a11d07c92b3c8cd2b762598c65e2bc599d6b0532f9454865a0",
  "url": "https://osv.dev/vulnerability/CVE-2017-14595",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2017-14595",
    "summary": "In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state.",
    "evidence": "osv:CVE-2017-14595",
    "products": [],
    "severity": "low",
    "structured": {
      "id": "CVE-2017-14595",
      "aliases": [
        "CVE-2017-14595"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/joomla/joomla-cms",
              "type": "GIT",
              "events": [
                {
                  "introduced": "011a6f5cc34bcc67338db2d24828fdff5940cbb6"
                },
                {
                  "last_affected": "87ed302667abf03750051b4548f41628da2b67b4"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:joomla:joomla\\!:3.7.0:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.7.0"
                      },
                      {
                        "last_affected": "3.7.0"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:joomla:joomla\\!:3.7.1:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.7.1"
                      },
                      {
                        "last_affected": "3.7.1"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:joomla:joomla\\!:3.7.2:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.7.2"
                      },
                      {
                        "last_affected": "3.7.2"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:joomla:joomla\\!:3.7.3:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.7.3"
                      },
                      {
                        "last_affected": "3.7.3"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:joomla:joomla\\!:3.7.4:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.7.4"
                      },
                      {
                        "last_affected": "3.7.4"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:joomla:joomla\\!:3.7.5:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.7.5"
                      },
                      {
                        "last_affected": "3.7.5"
                      }
                    ],
                    "source": "CPE_STRING"
                  }
                ]
              }
            }
          ],
          "versions": [
            "3.7.0",
            "3.7.1",
            "3.7.2",
            "3.7.3",
            "3.7.4",
            "3.7.5",
            "3.7.4-rc1",
            "3.7.4-beta1",
            "3.7.3-rc2",
            "3.7.3-rc1",
            "3.7.3-beta1",
            "3.7.1-rc2",
            "3.7.1-rc1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14595.json"
          }
        }
      ],
      "modified": "2026-10-24T10:30:57.394404791Z",
      "provider": "osv",
      "references": [
        "https://developer.joomla.org/security-centre/710-20170901-core-information-disclosure"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2017-14595",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 438840,
  "published_at": "2017-09-20T18:29:01.517+00:00"
}