---
title: "[20181005] - Core - CSRF hardening in com_installer"
description: "We help designers, developers, hobbyists and business owners get the most out of the Joomla CMS.  Join us at our free monthly meetups, and let us help you with your Joomla projects."
url: "https://www.joomlalondon.co.uk/official-joomla-announcements/20181005-core-csrf-hardening-in-com-installer"
date: "2026-09-09T14:31:50+00:00"
language: "en-GB"
---

#  \[20181005\] - Core - CSRF hardening in com\_installer

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** Moderate
- **Severity:** Low
- **Versions:** 2.5.0 through 3.8.12
- **Exploit type:** CSRF
- **Reported Date:** 2018-September-26
- **Fixed Date:** 2018-October-02
- **CVE Number:** [CVE-2018-17858](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17858)

### Description

Added additional CSRF hardening in com\_installer actions in the backend.

### Affected Installs

Joomla! CMS versions 2.5.0 through 3.8.12

### Solution

Upgrade to version 3.8.13

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

**Reported By:** [Raviraj A. Powar](https://www.twitter.com/ravirajpowar)Read more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/nfI3\_UnJIrM/755-20181005-core-csrf-hardening-in-com-installer.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/nfI3_UnJIrM/755-20181005-core-csrf-hardening-in-com-installer.html "[20181005] - Core - CSRF hardening in com_installe")

## Schema

```json
{ "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Start", "item": "https://www.joomlalondon.co.uk" }, { "@type": "ListItem", "position": 2, "name": "Official Joomla! Announcements", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements" }, { "@type": "ListItem", "position": 3, "name": "[20181005] - Core - CSRF hardening in com_installer", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements/20181005-core-csrf-hardening-in-com-installer" } ] }
```