CVE-2021-26040
[20210801] - Core - Insufficient access control for com_media deletion endpoint
概要
[20210801] - Core - Insufficient access control for com_media deletion endpoint
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command.
影響パッケージ
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"last_affected":"4.0.0"}]}]
参照URL
- advisory developer.joomla.org
- web nvd.nist.gov