Reverse Tabnabbing Vulnerability in J-BusinessDirectory Extension for Joomla!
CVE-2020-5182

6.5MEDIUM

Key Information:

Vendor

Cmsjunkie

Status
J-businessdirectory
Vendor
CVE Published:
3 February 2020

What is CVE-2020-5182?

The J-BusinessDirectory extension for Joomla! prior to version 5.2.9 is susceptible to a reverse tabnabbing vulnerability. This issue arises when users can input business website links without proper validation, allowing malicious scripts to exploit the window.opener property. If such links do not include the necessary rel="noopener" or similar attributes, they can redirect users to potentially harmful pages through tabnabbing, compromising user security. It is crucial for administrators to update to the latest version to mitigate this risk.

References

https://www.cmsjunkie.com/blog/joomla_business_directory_...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.