CVE-2022-23802 in Guru Extension

Résumé

par MITRE • 06/05/2022

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information (remote). The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components, possibility to view other users' information.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 20/01/2022
• Divulgation: 06/05/2022
• Modérer: accepté
• Entrée: VDB-199227
• CPE: prêt
• CWE: CWE-275 (confirmé)
• CVSS: 4.3 (VulDB)
• EPSS: 0.01080
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-23802
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-23802
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-23802/