← Back to home
Description
A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient sanitization of user-supplied input in file path parameters, allowing attackers to exploit directory traversal sequences (e.g., ../) to access sensitive files
Affected Products
| Vendor | Product | Versions Affected |
|---|---|---|
| rsjoomla.com | RSFirewall component for Joomla | 2.9.7-3.1.5 (affected) |
Credits / Discoverer
- Kamil Szczurowski
- Robert Kruczek