CVE-2022-23802 - Extension - Insecure Permissions within Joomla Guru extensions · CoreCVE

Back Back to CVE browser

HIGH

Extension - Insecure Permissions within Joomla Guru extensions

Published May 6, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.17%

Description

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information (remote). The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components, possibility to view other users' information.

Affected products

Vendor Ijoomla.com Product Guru Default
n/a
- Version
  5.2.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
5.2.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (1)

https://guru.ijoomla.com/changelog
x_refsource_MISCvendor-advisoryRelease NotesVendor Advisory

Link	Providers	Tags
https://guru.ijoomla.com/changelog		x_refsource_MISCvendor-advisoryRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Joomla

Published May 6, 2022

Updated Feb 25, 2026

Reserved Jan 20, 2022

Link CVE-2022-23802

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2022-23802

Severity n/a

Public date n/a

Links CVE-2022-23802

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a