Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-40384

Joomla! Core - [20260510] - Path traversal in com_media webservice endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Joomla

Description

An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

Default version status: unaffected

  • 4.0.0-5.4.5affected
  • 6.0.0-6.1.0affected

References