Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.8epss 0.3%
probabilidad de explotación
0.3%top 76% de las CVE
explotación observada
noninguna fuente lo reporta
Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
miniorgange.com · Custom API for Joomla (free) extension for Joomlaminiorgange.com · Import Export Users for Joomla (free) extension for Joomlaminiorgange.com · JoomAI - AI Assistant for Joomla (free) extension for Joomlaminiorgange.com · JoomShield by miniOrange (free) extension for Joomlaminiorgange.com · Keycloak user sync / User management (free) extension for Joomlaminiorgange.com · LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login (free) extension for Joomlaminiorgange.com · Login with Keycloak OAuth Single Sign-On (SSO) | Login with Keycloak (free) extension for Joomlaminiorgange.com · miniOrange Oauth Client (free) extension for Joomlaminiorgange.com · miniOrange User Provisioning with Azure for Joomla (free) extension for Joomlaminiorgange.com · OAuth Server for Joomla (free) extension for Joomlaminiorgange.com · OAuth Single Sign-On - OIDC SSO | Login with Azure AD (free) extension for Joomlaminiorgange.com · Okta User sync/Bi-directional user management (free) extension for Joomlaminiorgange.com · OTP Verification For Joomla (free) extension for Joomlaminiorgange.com · Restrict Files / Folders / Media Access for Joomla (free) extension for Joomlaminiorgange.com · SAML 2.0 IDP for Joomla (free) extension for Joomlaminiorgange.com · SAML SP Single Sign On – Login with ADFS (free) extension for Joomlaminiorgange.com · SAML SSO for Joomla (free) extension for Joomlaminiorgange.com · SAML SSO login with google Apps (free) extension for Joomlaminiorgange.com · SCIM User Provisioning for Joomla (free) extension for Joomlaminiorgange.com · Single Sign On for Educational Institutes (free) extension for Joomlaminiorgange.com · Staff/Employee Business Directory Search for Active Directory (free) extension for Joomlaminiorgange.com · Two Factor Authentication 2FA for Joomla (free) extension for Joomlaminiorgange.com · Web3 – Crypto wallet Login & NFT token gating (free) extension for JoomlaReferencias
https://www.miniorange.com/