IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
5.1Media

CVE-2026-73371Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Project Joomla! CMS Publicada: (hace 2 meses)

Descripción

Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items.

Debilidad (CWE): CWE-284

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
joomla joomla! 4.0.0 – ≤ 5.4.8
Joomla! Project Joomla! CMS 4.0.0-5.4.6, 6.0.0-6.1.2

Referencias y parches

Coincidencias CPE (NVD) (2)
  • cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* ≥ 4.0.0 ≤ 5.4.8
  • cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* ≥ 6.0.0 ≤ 6.1.3

CVE recientes del mismo producto — Joomla!

7.1Alta
CVE-2026-92231

Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3

Joomla! Project Joomla! CMS; Joomla! Project Joomla! Framework Filter package

Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The checkAttribute method normalized an attribute value before testing it against the "javascript:" scheme regex, however…