Medium
5.1
Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A...
CVE-2026-117542
First seen on SecPulse
Original description The description as published by the source.
Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A manipulated update_file form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web security@joomla.org
- web nvd.nist.gov
- web jdownloads.com
- web github.com