Vulnerability · Published May 6, 2022 · Assigned by Joomla
CVE-2022-23802Extension - Insecure Permissions within Joomla Guru extensions
High 7.5
In plain English
A high-severity security flaw in Guru from ijoomla.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 67% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.2%top 32.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information (remote). The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components, possibility to view other users' information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ijoomla.com | Guru | 5.2.5 |
References
- https://guru.ijoomla.com/changelog x_refsource_MISC, vendor-advisory