CyberRota Analysis
AI-GeneratedThe J2Store extension for Joomla is vulnerable to unauthorized cart-record tampering due to a wildcard ACL setting in the `fof.xml` file, which allows attackers to exploit the `save` task without proper CSRF protection on front-end requests. This flaw enables attackers to insert or overwrite cart entries with arbitrary user IDs or session IDs, potentially leading to data manipulation and session hijacking. Organizations using affected versions of J2Store should prioritize patching this vulnerability to safeguard user data and maintain the integrity of their e-commerce operations.
Original NVD Description
Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - `fof.xml` grants the `carts` view's tasks a wildcard `true` ACL, and FOF only enforces CSRF tokens on back-end HTML requests, not on front-end `format=raw` requests. `J2StoreControllerCarts` already scoped `remove()` to the caller's own session, but never overrode the generic FOF `save` task, so it remained reachable to insert new cart rows with an attacker-chosen `user_id`/`session_id`, or overwrite an existing row by id.