BIT-joomla-2021-26040

vendorUSosv

[20210801] - Core - Insufficient access control for com_media deletion endpoint

view advisory published 2025-04-03Licence: per source

An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-26040UScritical9.1OT elevated—
An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan