CVE-2026-117542
Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A manipulated `update_file` form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.
| CWE | CWE-35 |
| Vendor | jdownloads.com |
| Product | jdownloads extension for joomla |
| Published | Nov 12, 2026 |
| Last Updated | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for jdownloads.com jdownloads extension for joomla
Be the first to know when new unknown vulnerabilities affecting jdownloads.com jdownloads extension for joomla are published โ delivered to Slack, Telegram or Discord.
Get Free Alerts โ
Free ยท No credit card ยท 60 sec setup
Affected Versions
jdownloads.com / jDownloads extension for Joomla
1.0.0-4.1.7
Credits
ลukasz Rybak