Description
Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
regularlabs.com Articles Anywhere Pro extension for Joomla
Default version status: unaffected
1.0.0-18.0.2affected
regularlabs.com Users Anywhere Pro extension for Joomla
Default version status: unaffected
1.0.0-1.2.7affected