CyberRota Analysis
AI-GeneratedThe J-BusinessDirectory extension for Joomla versions prior to 6.2.3 is vulnerable to an unauthenticated ownership takeover, allowing attackers to change the ownership of listings by supplying arbitrary company and user IDs, even for listings that already have an owner. This could lead to unauthorized access and manipulation of business listings, potentially harming the integrity of the directory. Joomla administrators using affected versions should prioritize updating to version 6.2.3 or later to mitigate this risk.
Original NVD Description
Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3 - Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. 6.2.3 binds the action to the authenticated user and only allows unowned listings.