中 5.1

Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A...

CVE-2026-117542 SecPulse初出 3:04

原文の説明取得元が公開している説明をそのまま載せています (多くは英語)。

Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A manipulated update_file form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.

出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

参照URL

web security@joomla.org
web nvd.nist.gov
web jdownloads.com
web github.com