CVE-2026-63684
2026-07-22
20h39 +00:00
20h39 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items.CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Cross-Site Request Forgery The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
||
| Improper Access Control The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
