Description
Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| regularlabs.com | DB Replacer extension for Joomla | 1.0.0-8.2.7 | — |
References
- https://regularlabs.com/ product