CVE-2026-78083:详情

CVE-2026-78083

2026-09-10
10h17 +00:00
Cross-Site Request Forgery - CSRF
A01-Broken Access Control
2026-09-10
15h13 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 - The visitor booking (properties.booking) and agent contact form submission (agents.sendmail) endpoints processed POST requests without verifying Joomla session anti-CSRF tokens.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-352 Cross-Site Request Forgery
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

参考资料