3 matches found
Joomla! 3.x < 3.9.24 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.9.24. It is, therefore, affected by multiple vulnerabilities. - Lack of ACL checks in the orderPosition endpoint of commodules leak names of unpublished and/or inaccessible modules...
Joomla 3.0.x < 3.9.24 Multiple Vulnerabilities (5830-joomla-3-9-24)
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 3.9.24. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of...
CVE-2021-23123
CVE-2021-23123 affects Joomla! core, specifically the com_modules endpoint. Versions affected: Joomla! 3.0.0 through 3.9.23 . The root cause is the lack of ACL checks in the orderPosition endpoint of com_modules, resulting in an information disclosure: names of unpublished and/or inaccessible mod...