Number: AV17-140
Date: 22 September 2017
Purpose
The purpose of this advisory is to bring attention to the recently released security update for Joomla!.
Assessment
Joomla! has released version 3.8.0 of its web content management system that contains security fixes to address multiple vulnerabilities.
Versions affected: Joomla! 1.5.0 - 3.7.5
CVE References: CVE-2017-14595, CVE-2017-14596
Suggested action
CCIRC recommends that owner/operators test and deploy the vendor released updates or workarounds to affected platforms accordingly.
References
https://www.joomla.org/announcements/release-news/5713-joomla-3-8-0-release.html