جزئیات آسیب‌پذیری
CVE-2026-63265
regularlabs.com Advanced Module Manager extension for Joomlaregularlabs.com Articles Anywhere extension for Joomlaregularlabs.com Articles Field extension for Joomlaregularlabs.com Better Frontend Link extension for Joomlaregularlabs.com CDN for Joomla extension for Joomlaregularlabs.com Cache Cleaner extension for Joomla
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
CVSS 3.1
8.0بالا
شرح رسمی (انگلیسی)
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.0بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| regularlabs.com | Advanced Module Manager extension for Joomla | 1.0.0-11.0.1 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Articles Anywhere extension for Joomla | 1.0.0-18.0.2 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Articles Field extension for Joomla | 1.0.0-4.7.1 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Better Frontend Link extension for Joomla | 1.0.0-2.2.5 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | CDN for Joomla extension for Joomla | 1.0.0-7.3.7 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Cache Cleaner extension for Joomla | 1.0.0-9.7.6 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Conditional Content extension for Joomla | 1.0.0-6.0.0 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Content Templater extension for Joomla | 1.0.0-13.0.0 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | DB Replacer extension for Joomla | 1.0.0-8.2.7 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Email Protector extension for Joomla | 1.0.0-6.3.7 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | GeoIP extension for Joomla | 1.0.0-6.3.8 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | IP Login extension for Joomla | 1.0.0-6.2.5 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Keyboard Shortcuts extension for Joomla | 1.0.0-3.2.5 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Modals extension for Joomla | 1.0.0-15.0.0 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Modules Anywhere extension for Joomla | 1.0.0-8.4.1 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Quick Index extension for Joomla | 1.0.0-4.3.6 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | ReReplacer extension for Joomla | 1.0.0-15.0.3 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Regular Labs Extension Manager extension for Joomla | 1.0.0-9.2.5 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Snippets extension for Joomla | 1.0.0-9.3.10 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Sourcerer extension for Joomla | 1.0.0-12.2.8 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Tooltips extension for Joomla | 1.0.0-9.4.7 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | Users Anywhere extension for Joomla | 1.0.0-1.2.7 | CVEProject cvelistV5 (CNA) |
| regularlabs.com | What? Nothing! extension for Joomla | 1.0.0-17.2.5 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱- https://regularlabs.com/ product
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۵/۰۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۵/۰۶
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Joomla
پیش‌بینی بهره‌برداری (EPSS)
۰٫۱۷٪
احتمال بهره‌برداری در ۳۰ روز
۷٫۲٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-352Cross-Site Request Forgery (CSRF)
- CWE-284Improper Access Control