CyberRota Analysis
AI-GeneratedJoomGallery versions prior to 4.4.0 are vulnerable to an unauthenticated access control bypass that allows attackers to access password-protected gallery categories through the JSON view, circumventing the intended security measures. This vulnerability could lead to unauthorized exposure of sensitive content, making it critical for users of JoomGallery to prioritize upgrading to the latest version to mitigate potential data leaks. Joomla administrators and web developers using this extension should take immediate action to secure their installations.
Original NVD Description
Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the password gate - but the JSON view ( format=json ) skips this check entirely.