ASA-2019-00136 – Joomla: Missing ACL check in sample data plugins


Allele Security Alert

ASA-2019-00136

Identifier(s)

ASA-2019-00136, CVE-2019-9713

Title

Missing ACL check in sample data plugins

Vendor(s)

Open Source Matters, Inc

Product(s)

Joomla! CMS

Affected version(s)

Joomla! CMS versions 3.8.0 through 3.9.3

Fixed version(s)

Joomla! CMS version 3.9.4

Proof of concept

Unknown

Description

The sample data plugins lack ACL checks, allowing unauthorized access.

Technical details

Unknown

Credits

Sven Hurt and Benjamin Trenkle

Reference(s)

Security Announcements
https://developer.joomla.org/security-centre/

[20190304] – Core – Missing ACL check in sample data plugins
https://developer.joomla.org/security-centre/775-20190304-core-missing-acl-check-in-sample-data-plugins.html

CVE-2019-9713
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9713

CVE-2019-9713
https://nvd.nist.gov/vuln/detail/CVE-2019-9713

If there is any error in this alert or you wish a comprehensive analysis, let us know.

Last modified: March 14, 2019

We are not responsible for any data loss, device corruption or any other type of issue due to the use of any information mentioned in our security alerts.