Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData function in the customer controller. Attackers can send GET requests to index.php with option=com_booking, controller=customer, task=getUserData, and an id parameter to retrieve user names, usernames, and email addresses through brute force enumeration.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-06-19 | 1 | Disclosure1 |
| 2026-06-20 | 2 | Disclosure2 |
| 2026-08-30 | 1 | Patch1 |
🚨 HIGH severity CVE-2023-54357 (CVSS 7.5) affects Joomla com_booking 2.4.9. Unauthenticated attackers can enumerate user accounts via getUserData function. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/nGdQPa94of
Post summary
CVE-2023-54357, a high‑severity Jooma com_booking 2.4.9 vulnerability allowing unauthenticated user enumeration via getUserData, is disclosed with an urgent patch recommendation.
🚨*CVE* CVE-2023-54357 Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the… https://www.cve.org/CVERecord?id=CVE-2023-54357 ----- Traducción: CVE-2023-54357 Joo… http://infoflow.cloud`
Post summary
The tweet announces CVE-2023-54357, describing an information disclosure flaw in Joomla's com_booking component v2.4.9 that allows unauthenticated enumeration of user accounts, without referencing any PoC, exploits, patches, or active attacks.
CVE-2023-54357 Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the… https://www.cve.org/CVERecord?id=CVE-2023-54357
Post summary
CVE-2023-54357 exposes an information‑disclosure flaw in Joomla’s com_booking component 2.4.9 that allows unauthenticated attackers to enumerate user accounts.
CVE-2023-54357 Information Disclosure in Joomla com_booking Component 2.4.9 via getUserData Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2023-54357
Post summary
The text provides a concise disclosure of CVE‑2023‑54357, noting an information disclosure issue in Joomla's com_booking component.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | artio | book_it\! | 2.4.9 | joomla\! | - |