This vulnerability in Joomla! CMS is due to improper limitation of a pathname to a restricted directory (CWE-22) via the search parameter in the com_media files API endpoint. This improper validation can lead to path traversal, potentially allowing an attacker with high privileges to access files outside the intended directory scope. The affected versions include 4.0.0 to 5.4.5 and 6.0.0 to 6.1.0. The CVSS 4.0 vector indicates network attack vector, low attack complexity, partial attack traceability, and high impact on confidentiality. No patch or official remediation level has been published yet.

Successful exploitation could allow an attacker with high privileges to traverse directories and access files outside the intended media directory, potentially exposing sensitive information. However, the vulnerability requires high privileges and does not impact integrity or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Joomla! Project vendor advisory for current remediation guidance. Until a fix is available, restrict access to the com_media API endpoint to trusted users with appropriate privileges and monitor for suspicious activity related to path traversal attempts.