Threats tagged 'ghsa-v9wv-4x5c-j6q9'

An authenticated arbitrary path deletion vulnerability exists in the Joomla Event Gallery extension versions prior to 6.5.0. The flaw allows an authenticated user to use the 'images' parameter in the 'cache.process' task to recursively delete directories that the web server has write permissions for. This can lead to significant integrity and availability impacts on the affected system.