A logic bug in com_fields had exposed read-only information about a site’s custom fields to unauthorized users.
CVE Number: CVE-2017-16633.
This vulnerability affects the following application versions:
- Joomla 3.7.0
- Joomla 3.7.0-rc1
- Joomla 3.7.0-rc2
- Joomla 3.7.0-rc3
- Joomla 3.7.0-rc4
- Joomla 3.7.1
- Joomla 3.7.1-rc1
- Joomla 3.7.1-rc2
- Joomla 3.7.2
- Joomla 3.7.3
- Joomla 3.7.3-rc1
- Joomla 3.7.3-rc2
- Joomla 3.7.4
- Joomla 3.7.4-rc1
- Joomla 3.7.5
- Joomla 3.8.0
- Joomla 3.8.0-rc1
- Joomla 3.8.1
- Joomla 3.8.1-rc
- Joomla 3.8.2-rc