CVE-2019-25740: Joomla com_jsjobs 1.2.6 Arbitrary File Deletion
Joomla comjsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requests to the job.savejob task with path traversal sequences in the field2 parameter to delete arbitrary files accessible to the web server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
joomla/com_jsjobsfrom your environment.Uninstall or disable the com_jsjobs component (version 1.2.6) if it is not required.
- Compensating control
Deploy a web application firewall or server-side filter to block or inspect POST requests to the job.savejob task and to block path-traversal sequences (e.g., '../' or '..') in the field_2 parameter; if possible, restrict access to that task to trusted IPs or internal networks.
- Operational
Audit webserver and application logs for requests to the job.savejob task and for signs of arbitrary file deletion; restore any deleted files from backups and verify system integrity.
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25740?
CVE-2019-25740 has a medium severity rating of 6.5.
How do I fix CVE-2019-25740?
To fix CVE-2019-25740, ensure you upgrade to the latest version of Joomla com_jsjobs.
What type of vulnerability is CVE-2019-25740?
CVE-2019-25740 is an arbitrary file deletion vulnerability.
What causes the vulnerability in CVE-2019-25740?
The vulnerability in CVE-2019-25740 is caused by manipulating custom userfield parameters allowing path traversal.
Who is affected by CVE-2019-25740?
Authenticated users with access to the Joomla com_jsjobs 1.2.6 extension are affected by CVE-2019-25740.