Security issue with Gantry override
-
-
- Ron Severdia
- Jr. Rocketeer
- Posts: 31
- Thanks: 0
-
My host performs regular scans of my Joomla site and has identified the following file as having an XSS vulnerability:
/plugins/system/gantry/overrides/3.0/2.5/mod_random_image/default.php
I'm using Gantry 4.1.35. When will a fix be available? - Get the new second edition of the bestselling Joomla book, Using Joomla!
www.usingjoomlabook.com
-
-
-
- Damir
- Preeminent Rocketeer
- Posts: 22450
- Thanks: 2679
- Web Developer
-
Will ask the devs if this is maybe false positive thing.
What line in that file would have that vulnerability did host maybe say? - Available for CUSTOM WORK with Joomla, WordPress and Grav Templates and Gantry Framework!
-
-
-
- Ron Severdia
- Jr. Rocketeer
- Posts: 31
- Thanks: 0
-
Looks like this is the issue:
issues.joomla.org/tracker/joomla-cms/20533
And the override hasn't been updated to reflect this. - Get the new second edition of the bestselling Joomla book, Using Joomla!
www.usingjoomlabook.com
-
-
-
- Ron Severdia
- Jr. Rocketeer
- Posts: 31
- Thanks: 0
- Any update on this?
- Get the new second edition of the bestselling Joomla book, Using Joomla!
www.usingjoomlabook.com
-
-
-
- Ron Severdia
- Jr. Rocketeer
- Posts: 31
- Thanks: 0
- C'mon guys. This is a high-level security issue reported by my webhosting company. I know it's an older version of Gantry you probbaly don't really care about anymore, but you should at least respond and hopefully patch it.
- Get the new second edition of the bestselling Joomla book, Using Joomla!
www.usingjoomlabook.com
-
-
-
- Damir
- Preeminent Rocketeer
- Posts: 22450
- Thanks: 2679
- Web Developer
-
You can delete the file! It will use the Joomla one.
Delete this:
/plugins/system/gantry/overrides/3.2/2.5/mod_random_image/default.php
and
/plugins/system/gantry/overrides/3.3/2.5/mod_random_image/default.php - Last Edit: 5 years 8 months ago by Damir.
- Available for CUSTOM WORK with Joomla, WordPress and Grav Templates and Gantry Framework!
-
Time to create page: 0.054 seconds