Description
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
Remediation
References
Related Vulnerabilities
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2021-24066)
WebERP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-20420)
WordPress Plugin Contact Form Check Tester Cross-Site Scripting (1.0.2)
Oracle HTTP Server Improper Input Validation Vulnerability (CVE-2020-35169)
WordPress Plugin WordPress Video Player Multiple Vulnerabilities (1.5.4)