Executive brief
The Cache Cleaner extension for Joomla, which helps administrators manage website performance by clearing temporary data, contains a security flaw in its URL purging feature. This vulnerability allows an attacker to potentially trigger cache purges without proper authorization or a valid security token. While this does not directly expose sensitive data, it could be used to disrupt site performance or be leveraged in a cross-site request forgery (CSRF) attack.
Technical details
The Cache Cleaner extension for Joomla (versions 1.0.0 through 9.7.6) suffers from improper access control (CWE-284) and a lack of Cross-Site Request Forgery (CSRF) protection (CWE-352) within its URL purging functionality. Specifically, the component responsible for administrator URL purges does not consistently validate security tokens or verify that the requesting user possesses the necessary cache-management permissions. An attacker could exploit this by tricking an authenticated administrator into visiting a malicious link or by sending unauthorized requests to the purge endpoint. This could lead to unauthorized cache clearing, potentially impacting site performance or availability.
Affected products
- Regular Labs Cache Cleaner extension for Joomla 1.0.0 through 9.7.6
Timeline
- 2026-07-23: disclosed: CVE published by the Joomla! Project