Security readout for executives and security teams
Plain-English summary
CVE-2020-35613 is a SQL injection issue in Joomla CMS affecting versions 3.0.0 through 3.9.22. The reported flaw is in the backend user list. Successful abuse could threaten data confidentiality or integrity, but the provided sources do not include CVSS scoring, observed exploitation, or detailed prerequisites.
Executive priority
Treat this as a priority remediation for affected Joomla sites, especially externally reachable administration portals. SQL injection can create serious business risk, but exploitation evidence is not shown in the provided sources.
Technical view
Joomla described improper filter blacklist configuration leading to SQL injection in the com_users backend list view. The affected range is Joomla CMS 3.0.0 through 3.9.22. The source bundle does not provide exploit details, a CVSS vector, CWE mapping, or confirmed fixed version text.
Likely exposure
Exposure is limited to Joomla CMS deployments running versions 3.0.0 through 3.9.22, specifically the administrative backend user-list functionality.
Exploitation context
The CVE is not marked in CISA KEV, and the provided sources do not cite active exploitation or public weaponization.
Researcher notes
Focus validation on Joomla 3.0.0-3.9.22 and the com_users backend list view. The bundle lacks CVSS, exploit prerequisites, and fixed-version detail, so avoid assumptions beyond vendor-confirmed affected range.
Mitigation direction
- Inventory Joomla installations and identify versions 3.0.0 through 3.9.22.
- Review the Joomla vendor advisory for the supported upgrade or remediation path.
- Restrict administrative backend access to trusted networks and accounts.
- Prioritize remediation for internet-facing or high-value Joomla administrative environments.
Validation and detection
- Confirm the deployed Joomla version from asset inventory or administration records.
- Check whether affected systems expose the backend user list to administrative users.
- Review backend access logs for unusual user-list activity.
- Verify remediation against Joomla vendor guidance after applying updates.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Database behavior lookup
The CVE wording references database injection or access, so collection and exfiltration review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2020-35613 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://developer.joomla.org/security-centre/831-20201104-core-sql-injection-in-com-users-list-view.htmlCVE reference · x_refsource_MISC, vendor-advisory
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.