Skip to content

CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-26040

[20210801] - Core - Insufficient access control for com_media deletion endpoint

Read JSON ↗CVE.org ↗

Status: Published
Published: 2021-08-24
Updated: 2026-02-25
Assigning organization: Joomla

Description

An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

4.0.0affected

References

https://developer.joomla.org/security-centre/861-20210801-core-insufficient-access-control-for-com-media-deletion-endpoint ↗