CVE-2012-1611: Joomla!

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors. NOTE: this might be a duplicate of CVE-2012-1599.

Affected products

• Joomla! Joomla!: version 2.5.0 only; version 2.5.1 only; version 2.5.2 only; version 2.5.3 only

Published 2012-09-06. Last modified 2026-06-16.