CVE-2019-25762Disclosure(joomboost / joomproject)

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiting the projects endpoint. Attackers can send requests to index.php with option=com_jpprojects&view=projects&tmpl=component&format=json parameters to retrieve user IDs, names, and email addresses in JSON format.

joomboost CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/46121

Vendor / third-party advisories

https://www.vulncheck.com/advisories/joomla-component-joomproject-information-disclosure

Other references

Weakness type (CWE)

CWE-359

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

joomproject

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

joomboost

Products

joomproject

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2019-25762 Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiti… https://www.cve.org/CVERecord?id=CVE-2019-25762 ----- Traducción: CVE-2019-25762 Joo… http://infoflow.cloud`
Post summary
The entry discloses CVE‑2019‑25762 as an information disclosure flaw in Joomla! Component JoomProject 1.1.3.2 that allows unauthenticated attackers to access sensitive data, without providing exploit details or mitigation notes.
0000027
88 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2019-25762 Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiti… https://www.cve.org/CVERecord?id=CVE-2019-25762
Post summary
The tweet announces CVE-2019-25762 as an information disclosure flaw in Joomla! Component JoomProject 1.1.3.2 that permits unauthenticated attackers to access sensitive user data.
00000331
57.7K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	joomboost	joomproject	1.1.3.2	joomla\!	-

Explore more

Back to dashboard joomboost CVEs joomproject vulnerabilities