Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| regularlabs.com | Advanced Module Manager extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Articles Anywhere extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Articles Field extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Better Frontend Link extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Cache Cleaner extension for Joomla | unaffected |
|
||||||
| regularlabs.com | CDN for Joomla extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Conditional Content extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Content Templater extension for Joomla | unaffected |
|
||||||
| regularlabs.com | DB Replacer extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Email Protector extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Regular Labs Extension Manager extension for Joomla | unaffected |
|
||||||
| regularlabs.com | GeoIP extension for Joomla | unaffected |
|
||||||
| regularlabs.com | IP Login extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Keyboard Shortcuts extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Modals extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Modules Anywhere extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Quick Index extension for Joomla | unaffected |
|
||||||
| regularlabs.com | ReReplacer extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Snippets extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Sourcerer extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Tooltips extension for Joomla | unaffected |
|
||||||
| regularlabs.com | Users Anywhere extension for Joomla | unaffected |
|
||||||
| regularlabs.com | What? Nothing! extension for Joomla | unaffected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Regularlabs.com | Advanced Module Manager Extension For Joomla |
|
||||||||
| Regularlabs.com | Articles Anywhere Extension For Joomla |
|
||||||||
| Regularlabs.com | Articles Field Extension For Joomla |
|
||||||||
| Regularlabs.com | Better Frontend Link Extension For Joomla |
|
||||||||
| Regularlabs.com | Cache Cleaner Extension For Joomla |
|
||||||||
| Regularlabs.com | Cdn For Joomla Extension For Joomla |
|
||||||||
| Regularlabs.com | Conditional Content Extension For Joomla |
|
||||||||
| Regularlabs.com | Content Templater Extension For Joomla |
|
||||||||
| Regularlabs.com | Db Replacer Extension For Joomla |
|
||||||||
| Regularlabs.com | Email Protector Extension For Joomla |
|
||||||||
| Regularlabs.com | Geoip Extension For Joomla |
|
||||||||
| Regularlabs.com | Ip Login Extension For Joomla |
|
||||||||
| Regularlabs.com | Keyboard Shortcuts Extension For Joomla |
|
||||||||
| Regularlabs.com | Modals Extension For Joomla |
|
||||||||
| Regularlabs.com | Modules Anywhere Extension For Joomla |
|
||||||||
| Regularlabs.com | Quick Index Extension For Joomla |
|
||||||||
| Regularlabs.com | Regular Labs Extension Manager Extension For Joomla |
|
||||||||
| Regularlabs.com | Rereplacer Extension For Joomla |
|
||||||||
| Regularlabs.com | Snippets Extension For Joomla |
|
||||||||
| Regularlabs.com | Sourcerer Extension For Joomla |
|
||||||||
| Regularlabs.com | Tooltips Extension For Joomla |
|
||||||||
| Regularlabs.com | Users Anywhere Extension For Joomla |
|
||||||||
| Regularlabs.com | What? Nothing! Extension For Joomla |
|
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.177% probability within 30 days)
| Link | Providers |
|---|---|
| https://regularlabs.com/ |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Regularlabs.com
Regularlabs.com advanced Module Manager Extension For Joomla Regularlabs.com articles Anywhere Extension For Joomla Regularlabs.com articles Field Extension For Joomla Regularlabs.com better Frontend Link Extension For Joomla Regularlabs.com cache Cleaner Extension For Joomla Regularlabs.com cdn For Joomla Extension For Joomla Regularlabs.com conditional Content Extension For Joomla Regularlabs.com content Templater Extension For Joomla Regularlabs.com db Replacer Extension For Joomla Regularlabs.com email Protector Extension For Joomla Regularlabs.com geoip Extension For Joomla Regularlabs.com ip Login Extension For Joomla Regularlabs.com keyboard Shortcuts Extension For Joomla Regularlabs.com modals Extension For Joomla Regularlabs.com modules Anywhere Extension For Joomla Regularlabs.com quick Index Extension For Joomla Regularlabs.com regular Labs Extension Manager Extension For Joomla Regularlabs.com rereplacer Extension For Joomla Regularlabs.com snippets Extension For Joomla Regularlabs.com sourcerer Extension For Joomla Regularlabs.com tooltips Extension For Joomla Regularlabs.com users Anywhere Extension For Joomla Regularlabs.com what? Nothing! Extension For Joomla |
|
| Vendors & Products |
Regularlabs.com
Regularlabs.com advanced Module Manager Extension For Joomla Regularlabs.com articles Anywhere Extension For Joomla Regularlabs.com articles Field Extension For Joomla Regularlabs.com better Frontend Link Extension For Joomla Regularlabs.com cache Cleaner Extension For Joomla Regularlabs.com cdn For Joomla Extension For Joomla Regularlabs.com conditional Content Extension For Joomla Regularlabs.com content Templater Extension For Joomla Regularlabs.com db Replacer Extension For Joomla Regularlabs.com email Protector Extension For Joomla Regularlabs.com geoip Extension For Joomla Regularlabs.com ip Login Extension For Joomla Regularlabs.com keyboard Shortcuts Extension For Joomla Regularlabs.com modals Extension For Joomla Regularlabs.com modules Anywhere Extension For Joomla Regularlabs.com quick Index Extension For Joomla Regularlabs.com regular Labs Extension Manager Extension For Joomla Regularlabs.com rereplacer Extension For Joomla Regularlabs.com snippets Extension For Joomla Regularlabs.com sourcerer Extension For Joomla Regularlabs.com tooltips Extension For Joomla Regularlabs.com users Anywhere Extension For Joomla Regularlabs.com what? Nothing! Extension For Joomla |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization. | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization. |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization. | |
| Title | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints | |
| Weaknesses | CWE-284 CWE-352 |
|
| References |
|