Joomla 5.0.x < 5.4.9 / 6.0.x < 6.1.4 工作流程階段變更的 ACL 檢查不當

medium Nessus Plugin ID 362487

版本 1.4

Oct 7, 2026, 3:19 PM

  • CVSS metrics ("CVSSv2 score" set to 4.7)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:M/C:P/I:P/A:N")
  • CVSS metrics ("CVSSv3 score" set to 3.8)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N")
  • CVSSv3 severity (based on None, severity decreased from "High" to "Low")

Plugin Feed: 202610071519