Threats tagged 'ghsa-vrwx-f3jm-xp57'

An authenticated path traversal vulnerability exists in the Joomla extension jDownloads versions prior to 4.1.8. This flaw allows a manipulated update_file form parameter to bypass server file selection restrictions, enabling attackers to move files from outside the permitted directories or assign them to downloads. This could lead to exposure of file contents and removal of source files from their original locations.