<?xml version="1.0" encoding="UTF-8"?>
<VrdaData refvuldefversion="1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://vrda.jpcert.or.jp" xsi:schemaLocation="http://vrda.jpcert.or.jp/feed/xsd/vrda_data.xsd">
  <VrdaDataProvider>
    <Name>JVN iPedia</Name>
    <URL>http://jvndb.jvn.jp</URL>
  </VrdaDataProvider>
  <VrdaDataSourceType>Advisory</VrdaDataSourceType>
  <Vulinfo revisionno="1" lang="ja" invalidated="false">
    <VulinfoID>JVNDB-2026-031962</VulinfoID>
    <VulinfoData>
      <Title>Joomla!&#12395;&#12362;&#12369;&#12427;&#12450;&#12463;&#12475;&#12473;&#21046;&#24481;&#12395;&#38306;&#12377;&#12427;&#33030;&#24369;&#24615;</Title>
      <VulinfoDescription>
        <Overview>Joomla! Core - [20260809] - Joomla! 5.1.0-5.4.7 &#12362;&#12424;&#12403; 6.0.0-6.1.2 &#12395;&#12362;&#12369;&#12427; schema.org &#12398;&#36899;&#32097;&#20808;&#12487;&#12540;&#12479;&#12398;&#27880;&#20837;&#26178;&#12395;&#19981;&#36969;&#20999;&#12394; ACL &#12481;&#12455;&#12483;&#12463;&#12364;&#34892;&#12431;&#12428;&#12427;&#12290;&#19981;&#36969;&#20999;&#12394;&#12450;&#12463;&#12475;&#12473;&#12481;&#12455;&#12483;&#12463;&#12395;&#12424;&#12426;&#12289;&#12450;&#12463;&#12475;&#12473;&#12391;&#12365;&#12394;&#12356;&#36899;&#32097;&#20808;&#38917;&#30446;&#12398;&#36899;&#32097;&#20808;&#24773;&#22577;&#12364; schema.org &#12398;&#12473;&#12491;&#12506;&#12483;&#12488;&#12395;&#25407;&#20837;&#12373;&#12428;&#12427;&#12290;</Overview>
      </VulinfoDescription>
      <Affected>
        <AffectedItem affectedstatus="vulnerable">
          <Lapt>cpe:/a:joomla:joomla%21</Lapt>
        </AffectedItem>
      </Affected>
      <FactAnalysis>
      </FactAnalysis>
      <Related>
        <RelatedItem relationtype="self" origin="jvnipedia">
          <URL>https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-031962.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>Common Vulnerabilities and Exposures (CVE)</Name>
          <VulinfoID>CVE-2026-73372</VulinfoID>
          <URL>https://www.cve.org/CVERecord?id=CVE-2026-73372</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>National Vulnerability Database (NVD)</Name>
          <VulinfoID>CVE-2026-73372</VulinfoID>
          <URL>https://nvd.nist.gov/vuln/detail/CVE-2026-73372</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-284</VulinfoID>
          <Title>&#19981;&#36969;&#20999;&#12394;&#12450;&#12463;&#12475;&#12473;&#21046;&#24481;</Title>
          <URL>https://cwe.mitre.org/data/definitions/284.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>Joomla! Developer Network</Name>
          <VulinfoID>[20260809] - Core - Improper ACL checks when injection schema.org contact data</VulinfoID>
          <URL>https://developer.joomla.org/security-centre/1076-20260809-core-improper-acl-checks-when-injection-schema-org-contact-data.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>Joomla Content Management System (CMS) - try it! It's free!</VulinfoID>
          <URL>https://www.joomla.org/</URL>
        </RelatedItem>
      </Related>
      <DateFirstPublished>2026-09-04T17:45:27+09:00</DateFirstPublished>
      <DateLastUpdated>2026-09-04T17:45:27+09:00</DateLastUpdated>
    </VulinfoData>
  </Vulinfo>
</VrdaData>
