Description
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could install, update or remove extensions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| regularlabs.com | Regular Labs Extension Manager extension for Joomla | 1.0.0-9.2.5 | — |
References
- https://regularlabs.com/ product