Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ch97-6m5m-2jh8

Опубликовано: 29 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.4
CVSS3: 8.8

Описание

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.

EPSS

Процентиль: 21%
0.00286
Низкий

9.4 Critical

CVSS4

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
10 дней назад

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.

EPSS

Процентиль: 21%
0.00286
Низкий

9.4 Critical

CVSS4

8.8 High

CVSS3

Дефекты

CWE-434