Description (CNA)
Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| miniorgange.com / miniOrange Oauth Client (free) extension for Joomla | affected 1.0.0-3.2.0 |
| miniorgange.com / JoomShield by miniOrange (free) extension for Joomla | affected 1.0.0-1.0.2 |
| miniorgange.com / Okta User sync/Bi-directional user management (free) extension for Joomla | affected 1.0.0-1.1.0 |
| miniorgange.com / Keycloak user sync / User management (free) extension for Joomla | affected 1.0.0-1.1.0 |
| miniorgange.com / Restrict Files / Folders / Media Access for Joomla (free) extension for Joomla | affected 1.0.0-3.7 |
| miniorgange.com / LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login (free) extension for Joomla | affected 1.0.0-6.4.7 |
| miniorgange.com / Login with Keycloak OAuth Single Sign-On (SSO) | Login with Keycloak (free) extension for Joomla | affected 1.0.0-1.2.2 |
| miniorgange.com / SAML SSO login with google Apps (free) extension for Joomla | affected 1.0.0-6.4 |
| miniorgange.com / SAML SP Single Sign On – Login with ADFS (free) extension for Joomla | affected 1.0.0-6.4 |
| miniorgange.com / Web3 – Crypto wallet Login & NFT token gating (free) extension for Joomla | affected 1.0.0-3.5.1 |
| miniorgange.com / OAuth Single Sign-On - OIDC SSO | Login with Azure AD (free) extension for Joomla | affected 1.0.0-1.2.2 |
| miniorgange.com / miniOrange User Provisioning with Azure for Joomla (free) extension for Joomla | affected 1.0.0-1.1.0 |
| miniorgange.com / JoomAI - AI Assistant for Joomla (free) extension for Joomla | affected 1.0.0-1.0.5 |
| miniorgange.com / Single Sign On for Educational Institutes (free) extension for Joomla | affected 1.0.0-1.2.2 |
| miniorgange.com / Two Factor Authentication 2FA for Joomla (free) extension for Joomla | affected 1.0.0-5.0.9 |
| miniorgange.com / OTP Verification For Joomla (free) extension for Joomla | affected 1.0.0-6.6 |
| miniorgange.com / SAML 2.0 IDP for Joomla (free) extension for Joomla | affected 1.0.0-7.7 |
| miniorgange.com / Staff/Employee Business Directory Search for Active Directory (free) extension for Joomla | affected 1.0.0-2.0.4 |
| miniorgange.com / SAML SSO for Joomla (free) extension for Joomla | affected 1.0.0-11.0.2 |
| miniorgange.com / OAuth Server for Joomla (free) extension for Joomla | affected 1.0.0-5.1.5 |
| miniorgange.com / SCIM User Provisioning for Joomla (free) extension for Joomla | affected 1.0.0-4.0.4 |
| miniorgange.com / Custom API for Joomla (free) extension for Joomla | affected 1.0.0-4.2 |
| miniorgange.com / Import Export Users for Joomla (free) extension for Joomla | affected 1.0.0-4.6 |
CWE
CWE-284
References
ADP enrichment
No English description supplied.
No references supplied.