CVE-2017-11364
The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by …
Published: 2017-08-02 · CVSS: Unscored
The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7