Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8epss 0.1%
probabilidad de explotación
0.1%top 98% de las CVE
explotación observada
noninguna fuente lo reporta
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Productos afectados
regularlabs.com · Advanced Module Manager extension for Joomlaregularlabs.com · Articles Anywhere extension for Joomlaregularlabs.com · Articles Field extension for Joomlaregularlabs.com · Better Frontend Link extension for Joomlaregularlabs.com · Cache Cleaner extension for Joomlaregularlabs.com · CDN for Joomla extension for Joomlaregularlabs.com · Conditional Content extension for Joomlaregularlabs.com · Content Templater extension for Joomlaregularlabs.com · DB Replacer extension for Joomlaregularlabs.com · Email Protector extension for Joomlaregularlabs.com · GeoIP extension for Joomlaregularlabs.com · IP Login extension for Joomlaregularlabs.com · Keyboard Shortcuts extension for Joomlaregularlabs.com · Modals extension for Joomlaregularlabs.com · Modules Anywhere extension for Joomlaregularlabs.com · Quick Index extension for Joomlaregularlabs.com · Regular Labs Extension Manager extension for Joomlaregularlabs.com · ReReplacer extension for Joomlaregularlabs.com · Snippets extension for Joomlaregularlabs.com · Sourcerer extension for Joomlaregularlabs.com · Tooltips extension for Joomlaregularlabs.com · Users Anywhere extension for Joomlaregularlabs.com · What? Nothing! extension for JoomlaReferencias
https://regularlabs.com/