Unauthenticated Email Disclosure in Fabrik Joomla Extension

Executive Summary

This vulnerability is in the Fabrik Joomla extension versions before 4.7.2. It allows unauthenticated users to access an endpoint called onGetEmail that reveals any commenter's email address without proper access checks.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your Joomla site uses Fabrik extension version 4.7.2 or older. Inspect server logs for requests to the /index.php?option=com_fabrik&task=plugin.pluginAjax&plugin=fabrik_list&method=onGetEmail endpoint. Unauthorized access to this endpoint may indicate exploitation.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to harvest email addresses of users who left comments, leading to privacy violations, spam, phishing attacks, or further targeted exploits against those users.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate data protection regulations like GDPR by exposing personal data (email addresses) without consent. It may also conflict with HIPAA if email addresses are linked to protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Update Fabrik extension to version 4.7.2 or later immediately. If updating is not possible, disable the Fabrik component temporarily or restrict access to the onGetEmail endpoint via server rules until patched.

Useful 0 Not Useful 0