CVE-2017-11364

CVE-2017-11364 describes a critical vulnerability in Joomla! versions prior to 3.7.4, where the CMS installer fails to verify user webspace ownership. This flaw allows remote authenticated users to gain full control of the target application by exploiting Certificate Transparency logs. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low privileges and no user interaction, leading to high impacts on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting a low current threat landscape.