Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-67284 EUVD-2026-57162GHSA-mcj5-vx8j-3qrg

Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2

Published Aug 12, 2026 · Updated Aug 12, 2026 · Assigned by Joomla

Description

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - Authenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on files owned by other users.

Affected products

VendorProductAffectedFixed
tabaoca.org Cotton Cloud extension for Joomla 1.0.0-2.0.2 —

References