CVE-2021-26040
[20210801] - Core - Insufficient access control for com_media deletion endpoint
Summary
[20210801] - Core - Insufficient access control for com_media deletion endpoint
Original description
The description as published by the source.
An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command.
Affected packages
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"last_affected":"4.0.0"}]}]
References
- advisory developer.joomla.org
- web nvd.nist.gov