Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a {user} or [email] / [username] tag can change those plugin settings for that render. For example, [email allow_output_email="1"] can display an email address even when Allow output of email is set to No. This bypasses the personal-data output setting; it does not bypass a separate policy that disallows Users Anywhere tags from the content source altogether.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• regularlabs.com Diğer

Kayıt geçmişi

1. 2 Kas 2026 16:18Yayımlandı

İlgili açıklar

• 3,3 CVE-2026-120503EchoHS GeekezBrowser Public API status information disclosure
• 5,8 CVE-2025-13647Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths
• 6,6 CVE-2026-101178Permission control vulnerability in the autofill service module.
• 5,5 CVE-2026-101181Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affec…
• 3,1 CVE-2026-120310Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Response
• 4,3 CVE-2026-120323samanhappy MCPHub passthroughHeaders.ts information disclosure