A significant security flaw has been discovered in the ARTIO Book It! component for Joomla, specifically version 2.4.9. This vulnerability, identified as CVE-2023-54357, is an information disclosure issue that could allow malicious actors to quietly collect sensitive user data from your website. This means that details like usernames, full names, and email addresses could be exposed without requiring any authentication.<\/p>\n
This vulnerability impacts the ARTIO Book It!<\/b> component, which is a popular booking and reservation system for Joomla-powered websites.<\/p>\n The vulnerability primarily affects installations running ARTIO Book It! component version 2.4.9<\/b>. If your Joomla website uses this specific version of the booking component, it is at risk.<\/p>\n The vulnerability has been thoroughly analyzed and publicly disclosed. As of October 28, 2026, website administrators and developers using ARTIO Book It! 2.4.9 should be aware of this risk and take appropriate action. It is crucial to check for official updates or advisories from ARTIO.<\/p>\n Rated with a High<\/b> severity (CVSS score 7.5), this information disclosure vulnerability poses a considerable threat. Its high rating is due to the ease with which it can be exploited by unauthenticated attackers. They can use simple GET requests to enumerate user accounts, potentially leading to a large-scale data harvest. Such an incident can severely compromise user privacy and set the stage for more targeted attacks like phishing or identity theft.<\/p>\n To mitigate the risk associated with CVE-2023-54357, site administrators should prioritize updating their ARTIO Book It! component. While specific patch details weren’t immediately available through the primary vendor site during our research, the general recommendation for such vulnerabilities is:<\/p>\n For the most accurate and up-to-date solutions, always refer to the official ARTIO documentation, their support forums, or contact their support team directly.<\/p>\n http:\/\/www.artio.net\/<\/p>\n http:\/\/www.artio.net\/downloads\/joomla\/book-it\/book-it-2-free\/download<\/p>\n https:\/\/www.exploit-db.com\/exploits\/51595<\/p>\n https:\/\/www.vulncheck.com\/advisories\/joomla-com-booking-information-disclosure-via-account-enumeration<\/p>\n","protected":false},"excerpt":{"rendered":" A significant security flaw has been discovered in the ARTIO Book It! component for Joomla, specifically version 2.4.9. This vulnerability, identified as CVE-2023-54357, is an information disclosure issue<\/p>\n","protected":false},"author":17,"featured_media":2649,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1353,1352,697,980,695],"class_list":["post-4378","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-account-enumeration","tag-artio-book-it","tag-information-disclosure","tag-joomla","tag-web-security"],"yoast_head":"\n\n
Affected Products<\/h2>\n
Current Status<\/h2>\n
Severity Level<\/h2>\n
Possible Solutions<\/h2>\n
\n
index.php<\/code> involving option=com_booking<\/code>, controller=customer<\/code>, and task=getUserData<\/code>, especially with varying id<\/code> parameters.<\/li>\nReferences<\/h2>\n