CVE-2019-10945: Path Traversal
Published Apr 10, 2019
·Updated
An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory.
Affected Software
1 affected component
Joomla Joomla\!>=1.5.0<=3.9.4
Event History
Apr 10, 2019
CVE Published
via MITRE·06:07 PM
Data Sourced
via MITRE·06:07 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-10945?
CVE-2019-10945 has been rated as a critical vulnerability due to the potential for arbitrary file access.
2
How do I fix CVE-2019-10945?
To fix CVE-2019-10945, update Joomla! to version 3.9.5 or later.
3
What kind of attack is possible with CVE-2019-10945?
CVE-2019-10945 allows attackers to perform directory traversal attacks that can lead to unauthorized file access.
4
Which versions of Joomla! are affected by CVE-2019-10945?
CVE-2019-10945 affects Joomla! versions prior to 3.9.5, specifically from 1.5.0 to 3.9.4.
5
Is there a workaround for CVE-2019-10945?
While the recommended solution is to upgrade, restricting folder permissions may mitigate some risks associated with CVE-2019-10945.