CVE-2021-26033
[20210502] - Core - CSRF in AJAX reordering endpoint
Résumé
[20210502] - Core - CSRF in AJAX reordering endpoint
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint.
Paquets affectés
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"last_affected":"3.9.26"}]}]
Références
- advisory developer.joomla.org
- web nvd.nist.gov