RSFirewall Component Path Traversal Vulnerability in Joomla

A path traversal vulnerability has been identified in the RSFirewall component for Joomla, specifically in versions 2.9.7 through 3.1.5. This vulnerability allows authenticated users to read arbitrary files located outside the Joomla root directory. The issue arises from inadequate sanitization of user-supplied input in file path parameters, enabling attackers to exploit directory traversal sequences to access sensitive files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server, potentially exposing confidential information or application data.