CVE-2017-16633: Joomla!

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users.

Affected products

• Joomla! Joomla!: from 3.7.0, up to and including 3.8.1

Published 2017-11-10. Last modified 2026-06-17.