CVE-2026-117542
MEDIUM
MEDIUM
Priority: 0.03
BB Relevance:
55/100
Published: 2026-11-12
Modified: 2026-11-13
First seen: 2026-11-12
Status: active
Attack Surface
Network
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
High
UI:
None
AT:
None
VC:
Low
VI:
Low
VA:
Low
Description
Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A manipulated `update_file` form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.
Weakness Classification (1)
Affected Software (3)
| Vendor | Product | Version |
|---|---|---|
| jdownloads.com | jDownloads extension for Joomla | 1.0.0-4.1.7 |
| jdownloads.com | jDownloads extension for Joomla | 1.0.0-4.1.7 |
| jdownloads.com | jDownloads extension for Joomla | 1.0.0-4.1.7 |
References & Advisories (1)
product