{"id":3662,"date":"2023-12-04T13:23:07","date_gmt":"2023-12-04T18:23:07","guid":{"rendered":"https:\/\/cert.pa\/?p=3662"},"modified":"2023-12-04T13:24:29","modified_gmt":"2023-12-04T18:24:29","slug":"csirt-panama-aviso-2023-12-04-joomla-actualizaciones-de-seguridad-de-joomla-5-0-1-y-4-4-1","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=3662","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2023-12-04 Joomla: Actualizaciones de seguridad de Joomla 5.0.1 y 4.4.1"},"content":{"rendered":"\n<p>CSIRT Panam\u00e1 Aviso 2023-12-04 Joomla: Actualizaciones de seguridad de Joomla 5.0.1 y 4.4.1<\/p>\n\n\n\n<p>Gravedad: Alta&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<p>Fecha de publicaci\u00f3n: diciembre 04, 2023<br>\u00daltima revisi\u00f3n: diciembre 04, 2023<\/p>\n\n\n\n<p>Sitio web: https:\/\/www.joomla.org<\/p>\n\n\n\n<p>Sistemas Afectados:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>desde 1.6.0 hasta 4.4.0;<\/li>\n\n\n\n<li>5.0.0.<\/li>\n\n\n\n<li><strong>Descripci\u00f3n<\/strong><\/li>\n<\/ul>\n\n\n\n<p>El JSST (Joomla Security Strike Team) ha informado de una vulnerabilidad que afecta al core de Joomla CMS, cuya explotaci\u00f3n podr\u00eda permitir la divulgaci\u00f3n de informaci\u00f3n.<\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"I\">\n<li><strong>Impacto<\/strong><\/li>\n<\/ol>\n\n\n\n<p>Vulnerabilidad: CVE-2023-40626<\/p>\n\n\n\n<p>El proceso de an\u00e1lisis del archivo de idioma podr\u00eda manipularse para exponer variables de entorno que contuviesen informaci\u00f3n sensible.<\/p>\n\n\n\n<p><strong>III. Referencia a soluciones, herramientas e informaci\u00f3n<\/strong><strong><\/strong><\/p>\n\n\n\n<p>Actualizar a la versi\u00f3n de Joomla:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Versi\u00f3n 3.10.14-elts, mediante el enlace: <a href=\"https:\/\/elts.joomla.org\/release-notes\/joomla-3-10-14\">https:\/\/elts.joomla.org\/release-notes\/joomla-3-10-14<\/a><\/li>\n\n\n\n<li>Versi\u00f3n 4.4.1, mediante el enlace: https:\/\/downloads.joomla.org\/cms\/joomla4\/4-4-1<\/li>\n\n\n\n<li>Versi\u00f3n 5.0.1, mediante el enlace: https:\/\/downloads.joomla.org\/cms\/joomla5\/5-0-1<\/li>\n<\/ul>\n\n\n\n<p><strong>Fuentes:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\">\n<li>Instituto Nacional de Ciberseguridad, INCIBE. Avisos Seguridad Actualizaciones de seguridad de Joomla 5.0.1 y 4.4.1. Recopilado en: https:\/\/www.incibe.es\/incibe-cert\/alerta-temprana\/avisos\/actualizaciones-de-seguridad-de-joomla-501-y-441<\/li>\n<\/ol>\n\n\n\n<p><strong>Informaci\u00f3n de contacto<\/strong><br>CSIRT PANAMA<br>Computer Security Incident Response Team Autoridad Nacional para la Innovacion Gubernamental<br>E-Mail: info@cert.pa<br>Phone: +507 520-CERT (2378)<br>Web: https:\/\/cert.pa<br>Twitter: @CSIRTPanama<br>Key ID: 16F2B124<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CSIRT Panam\u00e1 Aviso 2023-12-04 Joomla: Actualizaciones de seguridad de Joomla 5.0.1 y 4.4.1 Gravedad: Alta&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fecha de publicaci\u00f3n: diciembre 04, 2023\u00daltima revisi\u00f3n: diciembre 04, 2023 Sitio web: https:\/\/www.joomla.org Sistemas Afectados: desde 1.6.0 hasta 4.4.0; 5.0.0&#8230;.<\/p>\n","protected":false},"author":4,"featured_media":460,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[72],"class_list":["post-3662","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad","tag-avisos-de-seguridad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/3662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3662"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/3662\/revisions"}],"predecessor-version":[{"id":3663,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/3662\/revisions\/3663"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/460"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3662"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3662"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}