PT-2021-16920 · Joomla · Joomla!

Brian Teeman + 2 · Published 2021-03-04 · Updated 2025-04-03 · CVE-2021-26027

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.0.0 through 3.9.24

Description An issue was discovered where incorrect ACL checks could allow unauthorized change of the category for an article.

Recommendations For Joomla! versions 3.0.0 through 3.9.24, update to a version that includes the fix for this issue to prevent unauthorized changes to article categories.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BIT-JOOMLA-2021-26027

CVE-2021-26027

Affected Products

Joomla!

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-26027 · Security Note
• https://developer.joomla.org/security-centre/847-20210307-core-acl-violation-within-com-content-frontend-editing.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26027 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-joomla-2021-26027 · Vendor Advisory
• https://t.me/cvenotify/10884 · Telegram Post