CVE-2026-63684
2026-07-22
20h39 +00:00
20h39 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items.CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Cross-Site Request Forgery The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
||
| Improper Access Control The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
