Joomla! Privilege Escalation Vulnerability in com_users Webservice Endpoint

A privilege escalation vulnerability has been identified in Joomla! CMS versions 4.0.0 prior to 5.4.5 and 6.0.0 prior to 6.1.0. The issue arises from an improper access check in the com_users group editing webservice endpoint, allowing unauthorized users to gain elevated privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing users to gain access to restricted functionalities or administrative capabilities.

Remediation

Users can upgrade to Joomla! CMS versions 5.4.6 or 6.1.1 to address this vulnerability.