Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5mfv-p7rj-5xgx

Опубликовано: 29 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 10
CVSS3: 9.8

Описание

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.

EPSS

Процентиль: 21%
0.00284
Низкий

10 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9.8
nvd
10 дней назад

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.

EPSS

Процентиль: 21%
0.00284
Низкий

10 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-284