PT-2019-19936 · Harmis · Harmis Je Messenger

Published 2019-03-29 · Updated 2023-02-03 · CVE-2019-9920

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Harmis JE Messenger component version 1.2.2

Description An issue was discovered in the Harmis JE Messenger component for Joomla!, allowing an action to be performed within the context of another user's account.

Recommendations For version 1.2.2, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2019-9920

Affected Products

Harmis Je Messenger

References · 4

• 🔥 https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9920.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9920 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9920 · Vendor Advisory
• https://extensions.joomla.org/extension/je-messenger · Note