An issue was discovered in templates/beez3/html/comcontent/article/default.php in Joomla! before 3.6.5. Inadequate permissions checks in the Beez3 layout override of the comcontent article view allow users to view articles that should not be publicly accessible, as demonstrated by an index.php?option=com_content&view=article&id=1&template=beez3 request.
{
"cpe": "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "3.6.4"
}
]
}