Description

Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to bypass intended access restrictions and perform otherwise restricted actions. Joomla! Core versions 3.x.x ranging from 3.0.0 and up to and including 3.9.24 are vulnerable.

Remediation

Update to Joomla! Core version 3.9.25 or latest

References

https://developer.joomla.org/security-centre/847-20210307-core-acl-violation-within-com-content-frontend-editing.html

Related Vulnerabilities

WordPress Plugin Social Media Widget by Acurax Multiple Unspecified Vulnerabilities (3.2.3)

WordPress Plugin Newsletter Manager PHP Object Injection (1.5.1)

WordPress Plugin miniOrange's Google Authenticator-WordPress Two Factor Authentication (2FA, MFA, OTP SMS and Email)-Passwordless login Cross-Site Scripting (5.4.39)

WordPress Plugin Free WordPress To Display Like/Dislike Comment Rating-Everest Comment Rating Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.4)

WordPress Plugin Download Plugin Unspecified Vulnerability (1.6.1)

Severity

High

Classification

CVE-2021-26027 CWE-264 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Authentication Bypass