Dashboard / CVE-2026-117544

CVE-2026-117544

HIGH
MEDIUM Priority: 0.02 BB Relevance: 76/100
Published: 2026-11-12 Modified: 2026-11-13 First seen: 2026-11-12 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
AT: None
VC: High
VI: None
VA: None

Description

Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The `other_file_id` parameter could reference another download’s file without fully enforcing the target download’s access restrictions. This allowed files to be delivered to users who were not authorised to access the target download.

Weakness Classification (2)

Affected Software (3)

VendorProductVersion
jdownloads.com jDownloads extension for Joomla 1.0.0-4.1.7
jdownloads.com jDownloads extension for Joomla 1.0.0-4.1.7
jdownloads.com jDownloads extension for Joomla 1.0.0-4.1.7

References & Advisories (1)

Bug Bounty Relevance

76 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.2 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.28%
Raw Score 0.002770
Percentile 20.4%
Date 2026-11-13

Intelligence Sources

mitre ref →
nvd ref →

External Links