Joomla 5.0.x < 5.4.9 / 6.0.x < 6.1.4 工作流程階段變更的 ACL 檢查不當

語言:

版本 1.4 Oct 7, 2026, 3:19 PM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:M/C:P/I:P/A:N") CVSS metrics ("CVSSv3 score" set to 3.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N") CVSSv3 severity (based on None, severity decreased from "High" to "Low") Plugin Feed: 202610071519
版本 1.2 Oct 2, 2026, 11:09 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202610022309
版本 1.1 Oct 2, 2026, 1:05 PM New Plugin Feed: 202610021305

* Changelogs are generally available for changes made after Nov 1, 2022