Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-42xr-8p7f-gqh6

Опубликовано: 21 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7

Описание

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.

EPSS

Процентиль: 24%
0.00313
Низкий

7 High

CVSS4

Дефекты

CWE-22

Связанные уязвимости

nvd
15 дней назад

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.

EPSS

Процентиль: 24%
0.00313
Низкий

7 High

CVSS4

Дефекты

CWE-22