Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-23750

[20230101] - Core - CSRF within post-installation messages

Description

An issue was discovered in Joomla! 4.0.0 through 4.2.6. A missing token check causes a CSRF vulnerability in the handling of post-installation messages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

Default version status: unaffected

  • 4.0.0-4.2.6affected

References