CVEvulnerability
CVE-2019-9920
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.7 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Description
An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user.
Affected configurations
• harmistechnology je messenger 1.2.2
References
- https://extensions.joomla.org/extension/je-messenger/ Product, Third Party Advisory
- https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9920.md Third Party Advisory
- https://extensions.joomla.org/extension/je-messenger/ Product, Third Party Advisory
- https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9920.md Third Party Advisory