An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.