CVE Catalog
CVE-2017-9030
HighSummary
The Codextrous B2J Contact extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, making it easier to read arbitrary uploaded files.
Risk Assessment
An attacker could gain access to sensitive data by reading files, potentially leading to information leakage and security breaches.
Recommendation
It is recommended to update the Codextrous B2J Contact extension to version 2.1.13 or later to mitigate this vulnerability.
Other vulnerabilities in Codextrous B2J Contact
Original NVD description (English source)
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files.