Joomla! CMS Path Traversal Vulnerability in com_media Webservice Endpoint

A path traversal vulnerability has been identified in the Joomla! CMS within the com_media files API endpoint. This issue arises from improper validation of the search parameter, allowing attackers to manipulate file paths and potentially access unauthorized files. The vulnerability affects Joomla! CMS versions 4.0.0 through 5.4.5 and 6.0.0 through 6.1.0.

Impact

Exploitation of this vulnerability allows for path traversal, enabling attackers to access files outside the intended directory.

Remediation

Users can upgrade to Joomla! CMS versions 5.4.6 or 6.1.1 to address this vulnerability.