Security Advisory

CVE-2019-10946

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-04-10 18:08:53
Last updated 2024-08-04 22:40:15
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Joomla! before 3.9.5. The "refresh list of helpsites" endpoint of com_users lacks access checks, allowing calls from unauthenticated users.