Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-27909

Extension - Incorrect Access Control within jdownloads extension

Description

In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jDownloads jDownloads

  • <=3.9.8.2affected

References