Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-23123

[20210101] - Core - com_modules exposes module names

Description

An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of com_modules leak names of unpublished and/or inaccessible modules.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

  • 3.0.0-3.9.23affected

References