CVE-2021-23123 | BDVDB-2026-147404 Detail

Joomla! ProjectJoomla! CMS

Description#

An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of com_modules leak names of unpublished and/or inaccessible modules.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://developer.joomla.org/security-centre/836-20210101-core-com-modules-exposes-module-names.html

Exploit#

No public exploit known

History#

Version 12021-01-12Record published in the CVE List.
Version 22026-02-25Most recent update recorded in the CVE List.