Veille CVE
CVE-2026-63265
8.0 ÉlevéeDescription
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Produits concernés
- regularlabs.com Advanced Module Manager extension for Joomla
- regularlabs.com Articles Anywhere extension for Joomla
- regularlabs.com Articles Field extension for Joomla
- regularlabs.com Better Frontend Link extension for Joomla
- regularlabs.com Cache Cleaner extension for Joomla
- regularlabs.com CDN for Joomla extension for Joomla
- regularlabs.com Conditional Content extension for Joomla
- regularlabs.com Content Templater extension for Joomla
- regularlabs.com DB Replacer extension for Joomla
- regularlabs.com Email Protector extension for Joomla
- regularlabs.com Regular Labs Extension Manager extension for Joomla
- regularlabs.com GeoIP extension for Joomla
- regularlabs.com IP Login extension for Joomla
- regularlabs.com Keyboard Shortcuts extension for Joomla
- regularlabs.com Modals extension for Joomla
- regularlabs.com Modules Anywhere extension for Joomla
- regularlabs.com Quick Index extension for Joomla
- regularlabs.com ReReplacer extension for Joomla
- regularlabs.com Snippets extension for Joomla
- regularlabs.com Sourcerer extension for Joomla
- regularlabs.com Tooltips extension for Joomla
- regularlabs.com Users Anywhere extension for Joomla
- regularlabs.com What? Nothing! extension for Joomla
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.0 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |