CyberRota Analysis
AI-GeneratedThe J2Store extension for Joomla is vulnerable due to a lack of CSRF protection in its cart, checkout, and profile controllers, allowing attackers to exploit an active session to alter billing or shipping addresses during order processing. This vulnerability can lead to significant impacts, including the redirection of orders to an attacker-controlled address, while maintaining the victim's session privileges. Organizations using affected versions of J2Store should prioritize patching this vulnerability to mitigate potential financial losses and unauthorized order modifications.
Original NVD Description
Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A forged request riding a victim's active checkout session could silently overwrite the billing or shipping address before order confirmation — the most consequential sub-case, since it opens the door to redirecting a paid order's goods to an attacker-controlled address — or tamper with a saved profile address via `saveAddress()`. As before, each forged request executes with only the victim's own session privileges, so there is no cross-account data access.