CVE-2026-67358
Received Received - Intake

Authenticated Download Quota Manipulation in J2Store

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: Joomla! Project

Description
Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user with a valid order token could increment the download limit counter on a download record belonging to a different order. The endpoint also lacked a CSRF token.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-22
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-67358
EUVD
EUVD-2026-64062

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
j2commerce j2store From 1.0.0 (inc) to 3.3.20 (inc)
j2commerce j2store From 4.0.0 (inc) to 4.0.20 (inc)
j2commerce j2store From 4.1.0 (inc) to 4.1.5 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a download quota manipulation issue in the J2Store Joomla extension versions 1.0.0-3.3.20, 4.0.0-4.0.20, and 4.1.0-4.1.5. An authenticated user with a valid order token can increment the download limit counter on a download record belonging to a different order. The affected endpoint also lacks a CSRF token, making it vulnerable to cross-site request forgery attacks.

Detection Guidance

This vulnerability involves an authenticated user manipulating download quota counters via a vulnerable endpoint in J2Store. To detect it, monitor for unusual download activity or quota increments on orders not belonging to the authenticated user. Check server logs for requests to the affected endpoint without valid CSRF tokens. Review database entries for download records with incremented counters not matching their original order.

Impact Analysis

This vulnerability could allow attackers to bypass download limits set by store owners, potentially enabling unauthorized access to digital products. It may lead to financial losses for businesses due to stolen or overused downloads. Additionally, the lack of CSRF protection could allow attackers to trick users into triggering unintended actions.

Compliance Impact

The vulnerability allows an authenticated user to manipulate download quotas on orders belonging to others, which could lead to unauthorized access or distribution of digital products. This may violate data protection principles under GDPR if personal data is involved, and could compromise confidentiality requirements under HIPAA if protected health information is exposed.

Mitigation Strategies

Update J2Store to the latest patched version immediately to address the download quota manipulation vulnerability. Ensure all Joomla extensions are updated regularly. Review and restrict user permissions to minimize access for authenticated users. Implement CSRF tokens on all relevant endpoints if not already present.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-67358. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart