Threats tagged 'ghsa-4qjx-g3m9-jcwf'

A critical path traversal vulnerability (CWE-22) exists in the lomart.fr UP plugin for Joomla, affecting versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29. This vulnerability allows unauthorized access to restricted directories and files by improperly limiting pathname inputs. It has a high CVSS 4.0 score of 9.2, indicating it is network exploitable without requiring privileges or user interaction, with a high impact on confidentiality and security controls. No official patch or remediation guidance is currently available.