Joomla! Issue Tracker - CMS

Download
Launch
Feeling Lucky

[#31927] - [4b6][Security] Path Disclosure in com_languages, no authentication check

?
avatar PhilETaylor
PhilETaylor
8 Jan 2021
avatar PhilETaylor PhilETaylor - open - 8 Jan 2021
avatar joomla-cms-bot joomla-cms-bot - change - 8 Jan 2021
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 8 Jan 2021
avatar PhilETaylor PhilETaylor - change - 8 Jan 2021
The description was changed
avatar PhilETaylor PhilETaylor - edited - 8 Jan 2021
avatar PhilETaylor
PhilETaylor - comment - 8 Jan 2021

Scratch that - I had another admin session open in a different window (not tab) so I was already authenticated as super admin - ah well..

I correctly get 403 when correctly logged out

{
  "error": true,
  "code": 403,
  "message": "You don't have permission to access this. Please contact a website administrator if this is incorrect."
}
avatar PhilETaylor PhilETaylor - close - 8 Jan 2021
avatar PhilETaylor PhilETaylor - change - 8 Jan 2021
Status New ⇒ Closed
Closed_Date 0000-00-00 00:00:00 ⇒ 2021-01-08 23:15:41
Closed_By ⇒ PhilETaylor
avatar PhilETaylor PhilETaylor - change - 8 Jan 2021
The description was changed
avatar PhilETaylor PhilETaylor - edited - 8 Jan 2021

Add a Comment

Login with GitHub to post a comment