EUVD-2026-47912
Path Traversal (CWE-22)
GHSA-h26c-c8w4-w73x
6.2
CVSS 3.1 · Vendor: Joomla
Share
Severity by source
Vendor (Joomla)
PRIMARY
6.2
MEDIUM
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from Vendor (Joomla) · only source for this CVE.
CVSS VectorVendor: Joomla
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Lifecycle Timeline
3
Analysis Generated
Jul 26, 2026 - 12:24 vuln.today
CVSS changed
Jul 24, 2026 - 20:22 NVD
6.2 (MEDIUM)
CVE Published
Jul 23, 2026 - 09:11 cve.org
UNKNOWN (no severity yet)
DescriptionCVE.org
CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata.
AnalysisAI
Path traversal in the CDN for Joomla Pro extension for Joomla allows an attacker to check file paths outside the intended site directory via the versioning feature, exposing whether arbitrary files exist and their modification timestamps. The vulnerability has a local attack vector per its CVSS score of 6.2, indicating exploitation likely requires local access or specific configuration, and no active exploitation or public exploit code has been identified.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).