CVE-2022-23802 Extension - Insecure Permissions within Joomla Guru extensions

2022-05-0617:55:11

Joomla

www.cve.org

cve-2022-23802

joomla guru

insecure permissions

sensitive information

information disclosure

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

51.4%

JSON

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information (remote). The component is: Access to private information and components, possibility to view other users’ information. Information disclosure Access to private information and components, possibility to view other users’ information.

CNA Affected

[
  {
    "product": "Guru",
    "vendor": "ijoomla.com",
    "versions": [
      {
        "status": "affected",
        "version": "5.2.5"
      }
    ]
  }
]

References

guru.ijoomla.com/changelog