An improper access check allows privelege escalation through the com_users group editing webservice endpoint.

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

An improper access check allows unauthorized access to com_config webservice endpoints.

An improper access check allows privilege escalation through the com_users batch task.

An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.

An improper access check allows unauthorized access to webservice endpoints.

The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers.

Improper Access Controls allows access to protected views.

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Improper Access Controls allows backend users to overwrite their username when disallowed.