Description
An issue was discovered in Joomla! before 3.9.5. The "refresh list of helpsites" endpoint of com_users lacks access checks, allowing calls from unauthenticated users.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2013-5776 Vulnerability (CVE-2013-5776)
Elgg Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3733)
WordPress Plugin Themify Builder Cross-Site Scripting (5.3.1)
MySQL CVE-2017-3455 Vulnerability (CVE-2017-3455)
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2024-39614)