This vulnerability (CWE-22) in the CDN for Joomla Pro extension for Joomla allows improper limitation of pathname access, enabling the CDN versioning functionality to access and reveal metadata about files outside the web root directory. This exposure could disclose sensitive information about local files, such as their existence and modification timestamps. The issue affects versions 1.0.0 through 7.3.7 of the extension. No CVSS score or vendor remediation information is currently available.

The vulnerability can lead to information disclosure by revealing the existence and modification metadata of files outside the intended directory scope. This may aid an attacker in reconnaissance but does not directly indicate remote code execution or privilege escalation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the affected functionality or applying compensating controls to limit exposure. Monitor official channels from regularlabs.com for updates.