Improper Access Control in Joomla Content History Comparison

The content history comparison view checked edit permission only for the first of the two compared history versions. A backend user with content-editing rights could pair a version they may edit with a version of an item they cannot access and read old revisions of that item's content. This vulnerability affects the following application versions:... Weiterlesen: Improper Access Control in Joomla Content History Comparison