An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be manipulated by non Super-Admin users.

Published Jun 11, 2019 · Updated Aug 4, 2024 · Assigned by mitre