Joomla! Improper Access Control Vulnerability Allowing Unauthorized Access to Protected Views

Vulnerability

A vulnerability exists in Joomla! CMS versions 3.9.0 through 3.10.19-elts, 4.0.0 through 4.4.9, and 5.0.0 through 5.2.2, due to improper access controls that permit unauthorized access to protected views. This issue represents an ACL (Access Control List) violation, potentially allowing users to view content or features that should be restricted.

Impact

Exploitation of this vulnerability could lead to unauthorized access to protected views, allowing users to see content or features that are normally restricted.

Remediation

Users are advised to upgrade to Joomla! CMS version 3.10.20-elts, 4.4.10, or 5.2.3.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
7.6
impact
2.5
exploitability
5.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.