Description (CNA)
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| regularlabs.com / Advanced Module Manager extension for Joomla | affected 1.0.0-11.0.1 |
| regularlabs.com / Articles Anywhere extension for Joomla | affected 1.0.0-18.0.2 |
| regularlabs.com / Articles Field extension for Joomla | affected 1.0.0-4.7.1 |
| regularlabs.com / Better Frontend Link extension for Joomla | affected 1.0.0-2.2.5 |
| regularlabs.com / Cache Cleaner extension for Joomla | affected 1.0.0-9.7.6 |
| regularlabs.com / CDN for Joomla extension for Joomla | affected 1.0.0-7.3.7 |
| regularlabs.com / Conditional Content extension for Joomla | affected 1.0.0-6.0.0 |
| regularlabs.com / Content Templater extension for Joomla | affected 1.0.0-13.0.0 |
| regularlabs.com / DB Replacer extension for Joomla | affected 1.0.0-8.2.7 |
| regularlabs.com / Email Protector extension for Joomla | affected 1.0.0-6.3.7 |
| regularlabs.com / Regular Labs Extension Manager extension for Joomla | affected 1.0.0-9.2.5 |
| regularlabs.com / GeoIP extension for Joomla | affected 1.0.0-6.3.8 |
| regularlabs.com / IP Login extension for Joomla | affected 1.0.0-6.2.5 |
| regularlabs.com / Keyboard Shortcuts extension for Joomla | affected 1.0.0-3.2.5 |
| regularlabs.com / Modals extension for Joomla | affected 1.0.0-15.0.0 |
| regularlabs.com / Modules Anywhere extension for Joomla | affected 1.0.0-8.4.1 |
| regularlabs.com / Quick Index extension for Joomla | affected 1.0.0-4.3.6 |
| regularlabs.com / ReReplacer extension for Joomla | affected 1.0.0-15.0.3 |
| regularlabs.com / Snippets extension for Joomla | affected 1.0.0-9.3.10 |
| regularlabs.com / Sourcerer extension for Joomla | affected 1.0.0-12.2.8 |
| regularlabs.com / Tooltips extension for Joomla | affected 1.0.0-9.4.7 |
| regularlabs.com / Users Anywhere extension for Joomla | affected 1.0.0-1.2.7 |
| regularlabs.com / What? Nothing! extension for Joomla | affected 1.0.0-17.2.5 |
CWE
CWE-352, CWE-284
References
ADP enrichment
No English description supplied.
No references supplied.