CVE Catalog
CVE-2017-5214
HighSummary
The Codextrous B2J Contact extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.
Risk Assessment
The organization may be exposed to unauthorized access to uploaded files, potentially leading to data leaks or other security incidents.
Recommendation
It is recommended to update the Codextrous B2J Contact extension to version 2.1.13 or newer to mitigate this vulnerability.
Other vulnerabilities in Codextrous B2J Contact
Original NVD description (English source)
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.