{"id":1440,"date":"2019-07-10T15:52:33","date_gmt":"2019-07-10T20:52:33","guid":{"rendered":"https:\/\/cert.pa\/?p=1440"},"modified":"2019-07-10T15:52:33","modified_gmt":"2019-07-10T20:52:33","slug":"csirt-panama-aviso-2019-07-10-vulnerabilidad-en-joomla","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=1440","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2019-07-10 Vulnerabilidad en Joomla."},"content":{"rendered":"\n<p><strong>Gravedad: baja<\/strong><br> Fecha de publicaci\u00f3n: 10 julio 2019<br> Fecha de modificaci\u00f3n: 10 julio 2019<br> Tipo de explotaci\u00f3n: Ejecuci\u00f3n de c\u00f3digo remoto<br> Fuente: developer.joomla.org<br> Sistemas Afectados<br> \u2022 Versiones de Joomla! de la: 3.9.7 &#8211; 3.9.8.<\/p>\n\n\n\n<p><br><strong> I. Descripci\u00f3n<\/strong><br> Se ha publicado una nueva actualizaci\u00f3n de seguridad del gestor de contenidos Joomla! que da soluci\u00f3n a un filtrado inadecuado, que permite a los usuarios autorizados crear campos personalizados para manipular las opciones de filtrado e inyectar una opci\u00f3n no validada.<\/p>\n\n\n\n<p><br> <strong>II. Soluci\u00f3n<\/strong><br> Si la versi\u00f3n que tienes instalada se encuentra entre las citadas anteriormente, te recomendamos que actualices a la \u00faltima Actualizar a la versi\u00f3n 3.9.9, que encontrar\u00e1s en la web oficial de Joomla! o desde el panel de administraci\u00f3n del propio gestor de contenidos. <br> Link de descarga: <a href=\"https:\/\/downloads.joomla.org\/co\/\">https:\/\/downloads.joomla.org\/co\/<\/a><\/p>\n\n\n\n<p><br> <strong>III. Referencia a soluciones, herramientas e informaci\u00f3n <\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/developer.joomla.org\/security-centre\/787-20190701-core-filter-attribute-in-subform-fields-allows-remote-code-execution.html?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+JoomlaSecurityNews+%28Joomla%21+Security+News%29\">Joomla! Red de desarrolladores<\/a><\/p>\n\n\n\n<p><br> IV. Informaci\u00f3n de contacto<br> CSIRT PANAMA<br> Autoridad Nacional para la Innovaci\u00f3n Gubernamental<br> E-mail: info@cert.pa<br> Web:   https:\/\/cert.pa<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Gravedad: baja Fecha de publicaci\u00f3n: 10 julio 2019 Fecha de modificaci\u00f3n: 10 julio 2019 Tipo de explotaci\u00f3n: Ejecuci\u00f3n de c\u00f3digo remoto Fuente: developer.joomla.org Sistemas Afectados \u2022 Versiones de Joomla! de la: 3.9.7 &#8211; 3.9.8. I&#8230;.<\/p>\n","protected":false},"author":4,"featured_media":460,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1440","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1440"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1440\/revisions"}],"predecessor-version":[{"id":1441,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1440\/revisions\/1441"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/460"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}