Vulnerability in Artio Joomla! Com_booking Component
CVE-2023-54357
Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData function in the customer controller. Attackers can send GET…
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Artio Joomla! Com_booking Component — versions 2.4.9
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2023-54357?
- CVE-2023-54357 is a high-severity vulnerability in Artio Joomla! Com_booking Component, classified under Observable Discrepancy. CVSS score: 7.5/10. Published 2026-06-19.
- How severe is CVE-2023-54357?
- High severity. CVSS v3 base score is 7.5 out of 10.