7.5

CVE-2026-64792

Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions

Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellerregularlabs.com
≫
Produkt Articles Anywhere extension for Joomla
Default Statusunaffected
Version 1.0.0-18.0.2
Status affected
Herstellerregularlabs.com
≫
Produkt Conditional Content extension for Joomla
Default Statusunaffected
Version 1.0.0-6.0.0
Status affected
Herstellerregularlabs.com
≫
Produkt Modules Anywhere extension for Joomla
Default Statusunaffected
Version 1.0.0-8.4.1
Status affected
Herstellerregularlabs.com
≫
Produkt ReReplacer extension for Joomla
Default Statusunaffected
Version 1.0.0-15.0.3
Status affected
Herstellerregularlabs.com
≫
Produkt Sourcerer extension for Joomla
Default Statusunaffected
Version 1.0.0-12.2.8
Status affected
Herstellerregularlabs.com
≫
Produkt Tabs & Accordions Pro extension for Joomla
Default Statusunaffected
Version 1.0.0-2.5.6
Status affected
Herstellerregularlabs.com
≫
Produkt Snippets Pro extension for Joomla
Default Statusunaffected
Version 1.0.0-9.3.10
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.164
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-524 Use of Cache Containing Sensitive Information

The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.

https://regularlabs.com/