CyberRota Analysis
AI-GeneratedThe J2Store extension for Joomla is vulnerable to download quota manipulation, allowing authenticated users with a valid order token to increase the download limit for files associated with other users' orders. This could lead to unauthorized access to digital assets, potentially resulting in financial loss or data leakage. Joomla administrators and users of affected J2Store versions should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user with a valid order token could increment the download limit counter on a download record belonging to a different order. The endpoint also lacked a CSRF token.