GHSA-vrwx-f3jm-xp57Medium

Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A...

Published
November 12, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (1)

📋 Description

Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A manipulated update_file form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.

🔗 References (3)