Design/Logic Flaw

2019-03-2915:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user.

CPENameOperatorVersion
je_messengereq1.2.2

CPE	Name	Operator	Version
	je_messenger	eq	1.2.2

References

extensions.joomla.org/extension/je-messenger/

github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9920.md