Description
Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| miniorgange.com | miniOrange Oauth Client (free) extension for Joomla | 1.0.0-3.2.0 | — |
| miniorgange.com | JoomShield by miniOrange (free) extension for Joomla | 1.0.0-1.0.2 | — |
| miniorgange.com | Okta User sync/Bi-directional user management (free) extension for Joomla | 1.0.0-1.1.0 | — |
| miniorgange.com | Keycloak user sync / User management (free) extension for Joomla | 1.0.0-1.1.0 | — |
| miniorgange.com | Restrict Files / Folders / Media Access for Joomla (free) extension for Joomla | 1.0.0-3.7 | — |
| miniorgange.com | LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login (free) extension for Joomla | 1.0.0-6.4.7 | — |
| miniorgange.com | Login with Keycloak OAuth Single Sign-On (SSO) | Login with Keycloak (free) extension for Joomla | 1.0.0-1.2.2 | — |
| miniorgange.com | SAML SSO login with google Apps (free) extension for Joomla | 1.0.0-6.4 | — |
| miniorgange.com | SAML SP Single Sign On – Login with ADFS (free) extension for Joomla | 1.0.0-6.4 | — |
| miniorgange.com | Web3 – Crypto wallet Login & NFT token gating (free) extension for Joomla | 1.0.0-3.5.1 | — |
| miniorgange.com | OAuth Single Sign-On - OIDC SSO | Login with Azure AD (free) extension for Joomla | 1.0.0-1.2.2 | — |
| miniorgange.com | miniOrange User Provisioning with Azure for Joomla (free) extension for Joomla | 1.0.0-1.1.0 | — |
| miniorgange.com | JoomAI - AI Assistant for Joomla (free) extension for Joomla | 1.0.0-1.0.5 | — |
| miniorgange.com | Single Sign On for Educational Institutes (free) extension for Joomla | 1.0.0-1.2.2 | — |
| miniorgange.com | Two Factor Authentication 2FA for Joomla (free) extension for Joomla | 1.0.0-5.0.9 | — |
| miniorgange.com | OTP Verification For Joomla (free) extension for Joomla | 1.0.0-6.6 | — |
| miniorgange.com | SAML 2.0 IDP for Joomla (free) extension for Joomla | 1.0.0-7.7 | — |
| miniorgange.com | Staff/Employee Business Directory Search for Active Directory (free) extension for Joomla | 1.0.0-2.0.4 | — |
| miniorgange.com | SAML SSO for Joomla (free) extension for Joomla | 1.0.0-11.0.2 | — |
| miniorgange.com | OAuth Server for Joomla (free) extension for Joomla | 1.0.0-5.1.5 | — |
| miniorgange.com | SCIM User Provisioning for Joomla (free) extension for Joomla | 1.0.0-4.0.4 | — |
| miniorgange.com | Custom API for Joomla (free) extension for Joomla | 1.0.0-4.2 | — |
| miniorgange.com | Import Export Users for Joomla (free) extension for Joomla | 1.0.0-4.6 | — |
References
- https://www.miniorange.com/ product